cloud-custodian

Cloud Custodian c7n Cloud Custodian（又称 c7n）是一个用于管理公有云账户和资源的规则引擎。它允许用户定义策略，以实现一个既安全又成本优化的良好管理云基础设施。它将组织中许多临时脚本整合到一个轻量级且灵活的工具中，并提供统一的指标和报告。 Custodian 可用于管理 AWS、Azure 和 GCP 环境，通过确保对安全策略（如加密和访问要求）、标签策略以及通过垃圾回收未使用资源和非工作时间资源管理来降低成本，实现实时合规。 Custodian 还支持对基础设施即代码资产运行策略，以便直接在开发者工作站或 CI 管道中提供反馈。 Custodian...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

CVE-2026-5281

CVE-2026-5281 2026/06/27：This vulnerability has been publicly disclosed. Although the patch points differ, the overall approach and the triggering path are completely identical to those in my PoC. Chromium commit commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71, tag:...

hackrf

HackRF Este repositorio contiene diseños de hardware y software para HackRF, una plataforma de radio definida por software SDR de bajo costo y código abierto. foto de fd0 de https://github.com/fd0/hackrf-one-pictures autor principal: Michael Ossmann [email protected] Información sobre HackRF...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

openclaw-dashboard

لوحة تحكم OpenClaw Agent لوحة تحكم جميلة وآمنة للمراقبة في الوقت الفعلي لوكلاء OpenClaw. تتبّع الجلسات، وراقب استخدام API، واعرض التكاليف، وأدر ملفات الذاكرة، وراقب صحة النظام - كل ذلك في مكان واحد. لقطات الشاشة نظرة عامة| الجلسات| التكاليف ---|---|--- | | حدود المعدل| البث المباشر| السجلات...

LSTM-MI

Un framework basado en LSTM para manejar el desequilibrio multiclase en la detección de botnets DGA. Este repositorio contiene un código muy simple para clasificar dominios como DGA o benignos. Este código demuestra nuestros resultados en nuestro artículo aquí:...

agent-scanning

控制你的AI代理。追踪成本。保持合规。开源 功能简介 一个仪表盘管理你的AI团队。 功能| 帮助方式 ---|--- 连接你的代理| 接入OpenAI、Anthropic或自定义代理 设定目标与预算| 分配任务，设定费用上限，定义成功标准 实时监控| 查看每个代理当前正在做什么 获取警报| 当出现异常时通过Slack、邮件或PagerDuty通知 证明合规| 导出审计追踪以满足SOC 2、ISO 42001要求 快速开始（5分钟） 1. 启动数据库 docker compose up -d postgres 2. 安装并配置 npm install cp...

log-horizon

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

conduit

Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 Claude Code / Cursor / Codex │...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

pqc-cost-of-delay

Coste de la demora para la migración post-cuántica Explorador en vivo · implementación de referencia, demostraciones, estudios de caso y estadísticas para un artículo de investigación. El riesgo de hacking clásico y el riesgo cuántico de tipo cosechar ahora, descifrar después HNDL, por sus siglas...

Important: Red Hat Security Advisory: Red Hat Cost Management On-Premise container image update

Updated container image for Red Hat Cost Management On-Premise is now available. Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then a division is performed. This could lead to a divide by 0 error. Example: echo 8:0...

CVE-2026-97307

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

EUVD-2026-92091

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

CVE-2026-97307

The StylemixThemes Cost Calculator Builder WordPress plugin (versions up to and including 4.0.17 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows an attacker to Retrieve Embedded Sensitive Data from the application. No specific expl...