malcom

Malcom - Analizador de Comunicación de Malware Malcom es una herramienta diseñada para analizar la comunicación de red de un sistema utilizando representaciones gráficas del tráfico de red y cotejarlas con fuentes de malware conocidas. Esto resulta útil al analizar cómo ciertas especies de malwar...

malcom

Malcom - Malware Communication Analyzer Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate wit...

totp-ssh-fluxer

Flujo de puerto SSH con TOTP Algunas personas cambian el puerto SSH en sus servidores para que sea un poco más difícil de encontrar para bots u otras amenazas, y aunque eso generalmente se considera una acción de seguridad por oscuridad, funciona muy bien para eliminar muchos de los inicios de...

fastfluxanalysis

Scripts de análisis de DNS ========== Una colección de scripts para detectar dominios Fast-Flux y dominios DGA. Se basa en la investigación realizada para la tesis de maestría. Los artículos de investigación relacionados están disponibles en las siguientes ubicaciones: ISSA 2011 ISSA 2012 Botconf...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: xeol, gitness, kube-arangodb, helm-set-status, flux-helm-controller, tigera-operator, helm-mapkubeapis, kyverno-notation-aws, cert-manager-cmctl, opentofu, helm-push, kargo, maru, k9s, rancher-helm, k8sgpt, manifest-tool, cluster-api-helm-controller...

CVE-2026-47680

CVE-2026-47680 is a path traversal vulnerability in FluxCD source-controller (versions 0.0.17 through 1.8.4), a Kubernetes operator for artifact acquisition from Git, OCI, Helm, and S3 sources. Two attack surfaces exist: (1) an actor who can influence the contents of a Bucket-referenced bucket ca...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: bento-fips, cg, coder, drone, external-secrets-operator-fips, prometheus-mongodb-exporter, flux-source-controller-fips, grype, litestream, gomplate-fips, crossplane-cli, guac, mediamtx-fips, omnictl-multiarch, rancher-agent, splunk-otel-collector-fips, tigera-operato...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: bento-fips, cg, coder, drone, external-secrets-operator-fips, prometheus-mongodb-exporter, flux-source-controller-fips, grype, litestream, gomplate-fips, crossplane-cli, guac, mediamtx-fips, omnictl-multiarch, rancher-agent, splunk-otel-collector-fips, tigera-operato...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: bento-fips, cg, coder, drone, external-secrets-operator-fips, prometheus-mongodb-exporter, flux-source-controller-fips, grype, litestream, gomplate-fips, crossplane-cli, guac, mediamtx-fips, omnictl-multiarch, rancher-agent, splunk-otel-collector-fips, tigera-operato...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: bento-fips, cg, coder, drone, external-secrets-operator-fips, prometheus-mongodb-exporter, flux-source-controller-fips, grype, litestream, gomplate-fips, crossplane-cli, guac, mediamtx-fips, omnictl-multiarch, rancher-agent, splunk-otel-collector-fips, tigera-operato...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kine, osv-scanner, rootlesskit, zot, gitea, rclone, gomplate, bento, falco-no-driver, gitlab-runner, cerbos, juicefs, wolfictl, kubernetes, kubescape, argo-workflows, aactl, flux-source-controller, flux, containerd, external-dns, docker,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kine, osv-scanner, rootlesskit, zot, gitea, rclone, gomplate, bento, falco-no-driver, gitlab-runner, cerbos, juicefs, wolfictl, kubernetes, kubescape, argo-workflows, aactl, flux-source-controller, flux, containerd, external-dns, docker,...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kine, osv-scanner, rootlesskit, zot, gitea, rclone, gomplate, bento, falco-no-driver, gitlab-runner, cerbos, juicefs, wolfictl, kubernetes, kubescape, argo-workflows, aactl, flux-source-controller, flux, containerd, external-dns, docker,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kine, osv-scanner, rootlesskit, zot, gitea, rclone, gomplate, bento, falco-no-driver, gitlab-runner, cerbos, juicefs, wolfictl, kubernetes, kubescape, argo-workflows, aactl, flux-source-controller, flux, containerd, external-dns, docker,...

CVE-2026-47863

A flaw was found in Reactor Core. Applications using the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. This occurs when upstream components deliver items during an active flush, causing the processing pipeline to permanently hang an...

CVE-2026-59324 fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction

When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...

CVE-2026-41843

CVE-2026-41843...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api, yunikorn-k8shim, external-secrets-operator, helm-operator, cloud-provider-gcp-cloud-controller-manager, kyverno-notation-aws, cloud-provider-aws, kube-metrics-adapter, kube-rbac-proxy, hubble-ui, hubble, kapp-controller, openfga, opentelemetry-operator,...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the fluxTransform when used with an asynchronous or reordering fluxFunction that emits raw payloads. An attacker can access another user's reply headers and cause reply mis-routing by sendin...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: memcached-exporter-fips, crossplane-provider-azure-spring, litestream, crossplane-provider-aws-amp-fips, cert-manager-google-cas-issuer-fips, grpcurl-fips, grafana-rollout-operator, crossplane-provider-aws-kinesisanalytics, crossplane-provider-aws-grafana-fips,...