28973 matches found
attack-stix-data
ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...
ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root
Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
reternal-quickstart
RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
bugsy
Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...
faraday
Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...
blackhat-python3
Python 3 "Black Hat Python" Source Code Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries. Althoug...
Important: Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix updates
An update is now available for Red Hat Ceph Storage 8.1. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These new packages...
ROOT-OS-DEBIAN-12-CVE-2026-9538 CVE-2026-9538 in perl - Patched by Root
Root has patched CVE-2026-9538 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root
Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-45803 CVE-2023-45803 in urllib3 - Patched by Root
Root has patched CVE-2023-45803 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44001 CVE-2026-44001 in vm2 - Patched by Root
Root has patched CVE-2026-44001 in the vm2 package for Root:npm. Multiple fixed versions available...
the-backdoor-factory
The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...
ROOT-APP-NPM-CVE-2026-42041 CVE-2026-42041 in axios - Patched by Root
Root has patched CVE-2026-42041 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root
Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...
Jenkins build-metrics 1.3 - Cross-Site Scripting
Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...
GeoServer and GeoTools - Remote Code Execution
GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...
ROOT-OS-DEBIAN-12-CVE-2026-41069 CVE-2026-41069 in libheif - Patched by Root
Root has patched CVE-2026-41069 in the libheif package for Root:Debian:12. Multiple fixed versions available...