bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

GeoServer and GeoTools - Remote Code Execution

GeoTools is an open source Java library that provides tools for geospatial data. Prior to versions 31.2, 30.4, and 29.6, Remote Code Execution RCE is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Versions 31.2, 30.4, and 29.6...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

EUVD-2026-45017

cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials...

blackhat-python3

Python 3 "Black Hat Python" Source Code Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries. Althoug...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

ROOT-APP-GOBINARY-CVE-2026-53492 CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root

Root has patched CVE-2026-53492 in the github.com/containerd/containerd/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59873 CVE-2026-59873 in tar - Patched by Root

Root has patched CVE-2026-59873 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-32274 CVE-2026-32274 in black - Patched by Root

Root has patched CVE-2026-32274 in the black package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48525 CVE-2026-48525 in PyJWT - Patched by Root

Root has patched CVE-2026-48525 in the PyJWT package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in pyjwt - Patched by Root

Root has patched CVE-2026-48526 in the pyjwt package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-76MC-F452-CXCM GHSA-76mc-f452-cxcm in dompurify - Patched by Root

Root has patched GHSA-76mc-f452-cxcm in the dompurify package for Root:npm. Multiple fixed versions available...

List of Security Fixes and Improvements in Veeam Backup for Microsoft 365

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup for Microsoft 365. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases to help...

Important: Red Hat Security Advisory: Red Hat Cost Management On-Premise container image update

Updated container image for Red Hat Cost Management On-Premise is now available. Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements...

ROOT-APP-MAVEN-CVE-2026-34480 CVE-2026-34480 in org.apache.logging.log4j:log4j-core - Patched by Root

Root has patched CVE-2026-34480 in the org.apache.logging.log4j:log4j-core package for Root:Maven. Multiple fixed versions available...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.44 packages update

Red Hat OpenShift Container Platform release 4.20.44 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...