fleet-cve-scanner

fleet-cve-scanner 一个轻量开源、单脚本的CVE扫描器，专为RMM管理的设备集群而设计。纯PowerShell 7，无需代理、无需设备、无需许可费用。 对于您管理的每台终端上的每款软件，它只回答一个问题：已安装的版本是否已知存在漏洞，以及紧急程度如何？ —— 通过将RMM的软件清单与免费、权威的安全数据源进行关联： NIST NVD —— 已知CVE及受影响的版本范围 CISA KEV —— 实际在野外被利用（绕过评分阈值） EPSS —— 未来30天内被利用的概率 CISA SSVC —— 操作/关注/跟踪优先级决策 MSRC —— 证明微软补丁已覆盖该发现...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

Platypus

Platypus 适用于 Linux 机器集群的主机管理枢纽。在你拥有的每台主机上安装 Platypus 代理；代理通过 TLS + protobuf 回连到你的 Platypus 服务器；通过服务器，你可以在所有托管主机上获得交互式 Shell、文件管理和网络隧道——全部通过一个中央控制平面。 截图 一个 Vercel 风格的扁平导航 UI，包含项目仪表盘、主机/监听器/会话浏览器、多主机调度控制台和管理员用户管理器。完整图库见 docs/screenshots/。重新运行 make screenshots 可从实时应用重新生成它们。 架构 Platypus...

shadow-fleet-tracker-light

影子舰队追踪器·轻量版 通过实时AIS数据监控波罗的海影子舰队。跟踪1200+艘来自乌克兰GUR战争与制裁目录的船只，对接AISStream WebSocket数据流，在自动更新的地图上标绘位置，标记靠近海底电缆的船只，并检测俄罗斯↔西方的转运模式。 免费、开源、本地运行。无云服务，除了免费的AISStream API密钥外无需订阅。 属于Former Lab主权情报工具链的一部分。 支持Former Lab 影子舰队追踪器·轻量版由Former Lab团队构建和维护——主权计算，在旧硬件上构建开放、隐私优先的工具，无风险投资支持。...

essh

ESSH 一个具有持久会话和实时健康仪表盘的 SSH 工作区。 在连接中断时保持远程 shell 持续运行，使用按键或鼠标在主机之间切换，无需离开终端即可检查系统健康状态。 ESSH 使用 OpenSSH 进行连接，并使用 tmux 保持你的工作持续运行。 实际效果 观看 42 秒演示 · 下载浏览器回放 使用 df 和 lsblk 检查磁盘，使用 ps 查找繁忙进程，使用 vmstat 采样系统活动，并使用 ss 和 ip 检查套接字和接口。 演示展示了终端主题切换、侧边、半屏和全屏健康视图、会话切换、帮助， 以及连接断开后恢复同一个远程 shell。 安装 从 Releases...

fleet

新闻 · 报告 Bug · 文档 · 为什么开源？ · Logo 素材 面向 IT 和安全团队的开源平台，可管理数千台计算机。为 API、GitOps、Webhooks、YAML 和人类而设计。 它的用途是什么？ Fleet 为你提供一个统一系统，通过无线方式保护并维护你的所有计算设备。无论组织使用何种操作系统，你都可以在一个平台上完成 MDM、补丁管理、软件部署以及任何验证工作。 Fleet 直接使用来自操作系统原生（直至裸机）的数据和事件。强大的诊断能力让你能在几分钟内排查最终用户设备上的错误，并收集准确的审计证据。 快速开始 你可以自行试用 Fleet，或与维护者约时间聊一聊。...

EU_compliance_MCP

EU Regulations MCP Server ⚰️ RETIRADO — integrado en ansvar-mcp-fleet 2026-07-07 Este repositorio independiente está archivado. El corpus de eu-regulations ahora vive en Ansvar-Systems/ansvar-mcp-fleet bajo mcps/eu-regulations/ integración: fleet PR 594; transición: deploy PR 653, en vivo...

CVE-2026-103265

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...

CVE-2026-103264

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

EUVD-2026-90659

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...

CVE-2026-103264 Fleet before 4.87.0 Authentication Bypass via Device Identifiers

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-103264 Fleet before 4.87.0 Authentication Bypass via Device Identifiers

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-103264

Fleet versions before 4.87.0 are vulnerable to an authentication bypass in the device API. The root cause is that the API accepts hostnames and hardware serials as authentication tokens alongside device UUIDs. Unauthenticated attackers capable of guessing these non-secret identifiers can authenti...

CVE-2026-103265 Fleet before 4.89.0 Information Disclosure via MDM Command Results

Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...

EUVD-2026-90658

Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS...

CVE-2026-103265

Fleet versions before 4.89.0 are vulnerable to an information disclosure flaw in the commands/results endpoint. The root cause is a failure to properly filter MDM command results by team authorization. Consequently, team-scoped users can access MDM command results for hosts belonging to other tea...

CVE-2026-13768

CVE-2026-13768：特权IoT Hub凭据——设备枚举、设备远程代码执行及家庭网络横向移动 安全公告 字段| 值 ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 严重 向量 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L 向量 4.0| CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L CWE| CWE-798 硬编码凭据的使用 研究人员|...

CVE-2026-88808

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same...

CVE-2026-88808

The Fleet agent in SUSE Rancher Fleet contains a vulnerability where it writes resources to downstream clusters using its own cluster-admin credentials instead of the specific ServiceAccount pinned to the deployment. This flaw impacts multi-tenancy environments where different teams share downstr...

CVE-2026-88808 Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin credentials instead of the ServiceAccount pinned to the deployment. It affects multi-tenancy environments where different tenants share the same...