DELTA

DELTA: SDN SECURITY EVALUATION FRAMEWORK What is DELTA? DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique...

Platypus

Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host — through on...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

OpenClawMachines

OpenClaw Machines Run as many isolated OpenClaw agents as you need, on hardware you own. OpenClaw Machines is an open-source platform for runningOpenClaw in secure AI sandboxes on your own infrastructure. A control plane orchestrates your hosts, and each agent runs in its own Firecracker microVM ...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

CVE-2022-1388

CVE-2022-1388 Impacto Esta vulnerabilidad puede permitir a un atacante no autenticado con acceso de red al sistema BIG-IP a través del puerto de administración y/o direcciones IP propias ejecutar comandos arbitrarios del sistema, crear o eliminar archivos, o deshabilitar servicios. No hay...

CVE-2022-1388

CVE-2022-1388 Vulnerabilidad de iControl REST en BIG-IP CVE-2022-1388 Esta vulnerabilidad puede permitir que un atacante no autenticado con acceso de red al sistema BIG-IP a través del puerto de administración y/o direcciones IP self ejecute comandos arbitrarios del sistema, cree o elimine archiv...

scour

Scour - AWS 检测框架 该工具用于在 AWS 控制平面内模拟攻击模式。每个攻击都会附带一个特定的 UA（用户代理），供蓝队进行信号检测。 状态 目前仍在积极开发中。存在大量错误 。 尚未准备好投入生产环境。 问题提交地址 ： https://github.com/grines/scour/issues 维护者 ： grines 什么是 Scour？ Scour 是一个基于 Golang 编写的现代模块化 AWS 利用框架，专为红队测试和蓝队分析而设计。它包含可用来攻击环境或构建防御检测的现代技术。 特性 命令补全 动态资源列表 命令历史 蓝队模式（为攻击行为添加唯一的用户代理标...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Plantilla de Nuclei para CVE-2022-1388 BIG-IP iControl REST Expuesto 06 de mayo de 2022 Esto solo verifica la presencia de la API accediendo al endpoint de autenticación Esta vulnerabilidad puede permitir que un atacante no autenticado con acceso de red al sistema BIG-IP a través del puerto de...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...

CVE-2026-53715

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...

CVE-2026-53714 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...

CVE-2026-53714

Envoy Gateway (an open-source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway) is affected by an authentication bypass in its xDS gRPC server when configured in GatewayNamespaceMode (provider.kubernetes.deploy.type=GatewayNamespace). The root cause is twof...

CVE-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...

CVE-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

CVE-2020-5902

CVE-2020-5902 Interfaz de gestión de tráfico BIG-IP de F5 TMUI Ejecución remota de código En las versiones de BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 y 11.6.1-11.6.5.1, la interfaz de gestión de tráfico TMUI, también denominada utilidad de configuración, presenta...

CVE-2026-82533

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-82533

DeepSeek Harness prior to 0.1.2-alpha.1 contains an authentication bypass in its local HTTP control-plane API. The root cause is that the server validates only the client-supplied Host header rather than the actual TCP connection origin, allowing a network attacker to spoof authentication. This p...