krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

cve-2026-23550-poc

CVE-2026-23550 PoC A small Bash tester for CVE-2026-23550. It requests the affected WordPress modular connector login endpoint, checks whether a wordpressloggedin cookie is issued, and attempts to confirm access to the admin dashboard. Warning: Use this tool only against systems you own or have...

CVE-2026-52832-PoC-exploit-nuclio-dashboard

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard modo NOP acepta POST /api/functions sin autenticación. El campo spec.handler no está validado como ruta, por lo que ../../../../tmp/x.txt:handler escapa del directorio temporal de compilación mediante path.Join, permitiendo a un atacant...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Las versiones anteriores del panel de Apache APISIX 2.10.1 tienen una vulnerabilidad de seguridad en el acceso no autorizado. La API de Manager utiliza dos frameworks e introduce el framework droplet sobre la base del framework gin, todas las API y el middleware de...

CVE-2024-56071

🚨 Simple Dashboard = 2.0 - Escalada de Privilegios No Autenticada 📄 Descripción El plugin Simple Dashboard para WordPress es vulnerable a la Escalada de Privilegios en todas las versiones hasta la 2.0 inclusive. Esto permite que atacantes no autenticados eleven sus privilegios al de administrador...

CVE-2019-17382-EXPLOIT

CVE-2019-17382 - Bypass de Autenticación en Zabbix Una vulnerabilidad crítica descubierta en versiones de Zabbix hasta la 4.4. El problema existe en el archivo zabbix.php al acceder a la acción dashboard.view con dashboardid=1. Permite a los atacantes omitir la página de inicio de sesión, otorgan...

CVE-2026-81915

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...

CVE-2026-81916

Concrete CMS before 9.5.3 contains an authorization bypass in the Express entry submission flow. The dashboard submit route resolved the target entity from an attacker-controlled route ID, while the permission check validated the independently posted form's entity — the two were never compared. A...

CVE-2026-81915

Concrete CMS below 9.5.3 has a missing object-level authorization check in the Types::submit() dashboard controller. When updating a Page Type, the controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType(), allowing a signed-in dashboard user a...

CVE-2026-81915 In Concrete CMS below 9.5.3, Page Type update omits object-level authorization

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...

CVE-2026-81915 In Concrete CMS below 9.5.3, Page Type update omits object-level authorization

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...

EUVD-2026-76249

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...

Arisu

Arisu — Sistema automatizado de minería de claves de IA Arisu es una herramienta que escanea automáticamente repositorios de código públicos GitHub, GitLab, Gitee, Docker Hub, PyPI, npm, etc. y fragmentos de código Gist, Issues, CommonCrawl, extrae claves API de servicios de IA DeepSeek, OpenAI,...

GHSA-JXFW-X594-9X9M vulnerabilities

Vulnerabilities for packages: azurite, wazuh-dashboard, wazuh-dashboard-fips...

CVE-2026-15603 vulnerabilities

Vulnerabilities for packages: azurite, wazuh-dashboard, wazuh-dashboard-fips...

pared

Pared Pared es un plano de control ligero y seguro y un panel administrativo web en tiempo real escrito en Crystal para la seguridad de hosts Linux. Proporciona gestión centralizada para las interfaces DBus/CLI de firewalld y las conexiones de NetworkManager, con TLS mutuo mTLS, autenticación...

VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...

Cowrie and Grafana Honeypot using Terraform on DigitalOcean

Honeypot de Cowrie y Grafana usando Terraform en DigitalOcean Demo Video Tabla de Contenidos Tabla de Contenidos Resumen del Sistema Tecnologías Estructura del Directorio del Proyecto Requisitos de Hardware Instalación y Configuración Gestión del Estado de Terraform Pipeline CI/CD Arquitectura de...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

netsentryx

NetSentryx PRO 🛡️ Motor de Detección de Amenazas y Observabilidad de Red en Tiempo Real de Alto Rendimiento Impulsado por IA NetSentryx PRO es una plataforma de inteligencia de amenazas y monitoreo de red basada en eventos de próxima generación. Combinando firmas basadas en reglas con un...