WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting

WordPress Cookie Information/Free GDPR Consent Solution plugin prior to 2.0.8 contains a cross-site scripting vulnerability via the admin dashboard. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Seguridad de la Información: Cumplimiento del RGPD y Respuesta a Incidentes Un marco integral de seguridad y cumplimiento de privacidad para sistemas de vigilancia biométrica de alto riesgo CCTV, tecnología de reconocimiento facial y rastreo de contactos centralizado, que incluye análisis...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option

The WP GDPR Compliance plugin allows unauthenticated users to execute any action and update any database value. This vulnerability is due to the lack of proper validation in the Includes/Ajax.php file. id: CVE-2018-19207 info: name: WP GDPR Compliance 1.4.3 - Unauthenticated Call Any Action or...

linux-baseline v2.11.0

DevSec Linux Baseline This Compliance Profile ensures that all hardening projects keep the same quality. https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening Standalone Usage This Compliance Profile requires...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

reposaur

Reposaur Reposaur es la herramienta de cumplimiento de código abierto para plataformas de desarrollo. Audita, verifica y reporta tus datos y configuraciones fácilmente con políticas predefinidas y/o personalizadas. Soporta GitHub. Soporte para GitLab, BitBucket y Gitea próximamente. ⚠️ antes de...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

riskscanner

Open source multi-cloud security compliance scanning platform Chinese Version...

PSCF

OWASP Product Security Capability Framework PSCF https://prods.ec/ El OWASP Product Security Capability Framework PSCF es una guía integral diseñada para estructurar y mejorar la seguridad de los productos de software. Mediante un enfoque estructurado para identificar, implementar y gestionar...

CVE-2026-16794

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

CVE-2026-16794 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

EUVD-2026-80118

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

CVE-2026-16794

GitLab EE is affected by a missing authorization flaw in compliance framework management . Under certain conditions, an authenticated user holding the Security Manager role could execute arbitrary CI/CD jobs and access protected variables within group projects. The root cause is improper authoriz...

trivy

Componente de CI de Trivy para GitLab Un componente de CI de GitLab para Trivy — el escáner de seguridad integral que cubre imágenes de contenedores, sistemas de archivos, repositorios, clústeres de Kubernetes, SBOMs y cumplimiento de licencias. Conecta estas plantillas directamente en tus...

openshield

Open source Cloud Security Posture Management CSPM for Azure detect misconfigurations, map them to CIS / NIST / ISO 27001 / SOC 2, remediate with one command, and identify cryptographic assets requiring quantum-safe migration. Website · Documentation · Roadmap · Changelog · Security Policy · Disc...

Important: Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update

An updated OpenShift Compliance Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift Compliance Operator v1.10.0 is now available. See the documentation for bug fix information:...

violent-python3

Código fuente de Python 3 "Violent Python" Código fuente del libro "Violent Python" de TJ O'Connor. El código se ha convertido completamente a Python 3, reformateado para cumplir con los estándares PEP8 y refactorizado para eliminar problemas de dependencias derivados de la implementación de...

asterion-network-minotaur

Auditor ético de seguridad de red: más de 50 comprobaciones en SMB, RDP, LDAP, SSH, Kerberos y más, con análisis de CVE impulsado por IA y mapeo de cumplimiento OWASP/CIS/NIST. Inicio rápido · Documentación · Docker · Funciones de IA · Dar estrella en GitHub En acción !Asterion — salida de escane...