monkey

Monkey 문서 이 폴더에는 Monkey 문서 사이트가 포함되어 있습니다. 자세한 내용은 content/development/contribute-documentation.md를 참조하세요...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

MOSAIC

MOSAIC このイニシアチブの目的は何ですか？ MOSAIC は、AI セキュリティ標準とガイドラインを作成する組織のための調整構造を提供し、不整合、重複作業、ずれ、ギャップを削減します。 最終目標は、標準とガイドラインの全体像が、私たちがますますあらゆるものに接続し、機密データを委ねている AI システムを保護・監督するための明確なガイダンスを提供できるようにすることです。 MOSAIC メンバー組織 を参照してください。 ロードマップ を参照してください。 MOSAICstandards.org を参照してください。 詳細は、この LinkedIn の投稿 と 発足会議のノート...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

LWHP

LWHP Linux 및 Windows 강화 포인트 강화 가이드는 모든 시스템이 다른 구성을 필요로 하기 때문에 완전할 수 없습니다. 이 문서를 사용할 때 이를 고려하고 이 저장소에 작성된 포인트를 지침으로 삼으십시오...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

vex-repo-spec

VEX リポジトリ仕様 v0.1 VEX リポジトリ仕様 v0.1 1. バージョニング 2. リポジトリマニフェスト 2.1 概要 2.2 ファイルの場所 2.3 スキーマ 2.4 例 2.5 フィールドの説明と使用上の注意 主要フィールド バージョンサブフィールド ロケーションサブフィールド 3. リポジトリ構造 3.1 ファイル構造 3.2 index.json 3.3 VEX ドキュメント 3.4 使用上の注意 ディレクトリ構造 VEX ドキュメントの内容 3.5 リポジトリの更新 4. リポジトリの配布 4.1 概要 4.2 アーカイブ形式 5...

flipperzero-firmware v1.5.0-rc

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

EUVD-2025-210631

The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

PT-2026-66340

Name of the Vulnerable Software and Affected Versions Disable Login Page versions . Description A security issue exists in the Disable Login Page project. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations At the moment, there...

PT-2026-63537

Name of the Vulnerable Software and Affected Versions Drupal Commerce Elavon affected versions not specified Description A security issue exists in the Drupal Commerce Elavon project. The project has been marked as unsupported, and the security flaw remains unaddressed by the maintainer...

Exploit for CVE-2026-15409

cve-id ⚡ Simple Usage Use this project only in safe and...

Siemens Mendix Runtime

SUMMARY Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient guidance to configure access rules securely. This documentation gap may lead application developers to unknowingly apply overly...

Siemens SIMATIC S7-PLCSIM Advanced

SUMMARY SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. 2. GENERAL RECOMMENDATIONS As a...

Siemens IAM Client

SUMMARY Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions...

Siemens Desigo CC

SUMMARY OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service DoS or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest...

CVE-2026-0285

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

OESA-2026-2921 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger...