attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

blackhat-python3

Python 3 "Black Hat Python" ソースコード ジャスティン・サイツ著『Black Hat Python』のソースコードです。コードは完全にPython 3に変換され、PEP8標準に準拠するよう再フォーマットされ、非推奨ライブラリの実装に伴う依存関係の問題を排除するためにリファクタリングされています。...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

ingress-nginx

Ingress NGINX 退役 退役 关于 Ingress NGINX 退役你需要了解的信息： 尽力维护将持续至 2026 年 3 月。 此后将不再发布新版本，不再修复错误，也不对任何可能发现的安全漏洞进行更新。 Ingress NGINX 的现有部署不会受影响。 现有项目产物（例如 Helm Chart 和容器镜像）将继续可用。 Ingress NGINX 控制器 概述 ingress-nginx 曾是一个 Kubernetes 的 Ingress 控制器，它使用 NGINX 作为反向代理和负载均衡器。 在 Kubernetes 文档站点上了解更多关于 Ingress 的信息。 使用...

ROOT-APP-NPM-GHSA-JWM3-QCFW-C5PP GHSA-jwm3-qcfw-c5pp in n8n - Patched by Root

Root has patched GHSA-jwm3-qcfw-c5pp in the n8n package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34480 CVE-2026-34480 in org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2026-34480 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-55163 CVE-2025-55163 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2025-55163 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.17.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in vm2 - Patched by Root

Root has patched CVE-2026-44001 in the vm2 package for Root:npm. Multiple fixed versions available...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.17.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.20 Images

Red Hat OpenShift Virtualization release v4.20 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...