MOSAIC

MOSAIC ¿Cuál es el propósito de esta iniciativa? MOSAIC proporciona una estructura de coordinación para las organizaciones que crean estándares y guías de seguridad de IA, reduciendo inconsistencias, trabajo duplicado, desalineaciones y brechas. El objetivo final es que el panorama de estándares ...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

LWHP

LWHP Puntos de Hardening para Linux y Windows Las guías de hardening nunca pueden ser completas, ya que cada sistema necesita una configuración diferente. Considérelo al usar estos documentos y tome los puntos escritos en este repositorio como pautas...

monkey

Documentación de Monkey Esta carpeta contiene el sitio de Documentación de Monkey. Para más información, consulte content/development/contribute-documentation.md...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

vex-repo-spec

Especificación del Repositorio VEX v0.1 Especificación del Repositorio VEX v0.1 1. Versionado 2. Manifiesto del Repositorio 2.1 Descripción General 2.2 Ubicación del Archivo 2.3 Esquema 2.4 Ejemplo 2.5 Descripciones de Campos y Notas de Uso Campos Principales Subcampos de versions Subcampos de...

flipperzero-firmware v1.5.0-rc

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

EUVD-2025-210631

The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...

CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

PT-2026-66340

Name of the Vulnerable Software and Affected Versions Disable Login Page versions . Description A security issue exists in the Disable Login Page project. The project is currently marked as unsupported, and the maintainer has not provided a fix for this issue. Recommendations At the moment, there...

PT-2026-63537

Name of the Vulnerable Software and Affected Versions Drupal Commerce Elavon affected versions not specified Description A security issue exists in the Drupal Commerce Elavon project. The project has been marked as unsupported, and the security flaw remains unaddressed by the maintainer...

Exploit for CVE-2026-15409

cve-id ⚡ Simple Usage Use this project only in safe and...

Siemens Mendix Runtime

SUMMARY Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient guidance to configure access rules securely. This documentation gap may lead application developers to unknowingly apply overly...

Siemens SIMATIC S7-PLCSIM Advanced

SUMMARY SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. 2. GENERAL RECOMMENDATIONS As a...

Siemens IAM Client

SUMMARY Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions...

Siemens Desigo CC

SUMMARY OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service DoS or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest...

CVE-2026-0285

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

OESA-2026-2921 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger...