flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

GCPBucketBrute

GCPBucketBrute Un script para enumerar buckets de Google Storage, determinar qué acceso tienes a ellos y determinar si se pueden escalar privilegios. Este script acepta opcionalmente credenciales de cuenta de usuario/servicio de GCP y una palabra clave. Luego, se generará una lista de permutacion...

CVE-2026-19407 GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...

MAL-2026-13983 Malicious code in knip-bun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d412258df9a21f510333926a9be29bed8ae6368e549e295c84e187bdc1a3725 Package knip-bun typosquats the popular knip linter. The main module is an empty stub module.exports = , and package.json declares a dependency...

Malicious code in eslint-publish-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...

CVE-2026-49818: Improper Limitation of a Pathname to a Restricted Directory

The Apache Airflow Samba provider's GCSToSambaOperator joined GCS object names to the SMB destination path without a containment check, so an object named with ../ segments resolved a write path outside the configured destinationpath. An attacker able to write objects into the source GCS bucket —...