katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

GyoiThon

GyoiThon : Next generation penetration test tool Japanese page is here. Presentation January 25th,2018:JANOG41 March 23th,2018:Black Hat ASIA 2018 Arsenal August 12th,2018:DEFCON26 DemoLabs October 24th,2018:OWS in CSS2018 November 3rd,2018:AV TOKYO 2018 HIVE December 22-23th,2018:SECCON YOROZU...

libretto

Libretto Libretto is a toolkit for building robust web integrations. It gives your coding agent a live browser and a token-efficient CLI to: Inspect live pages with minimal context overhead Capture network traffic to reverse-engineer site APIs Record user actions and replay them as automation...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard MCP Server Scorecard Command Line Interface Prerequisites Installation Authentication Basic...

graph-go

graph-go See your infrastructure. Zero Config. Point graph-go at your stack and get a live, interactive map of every database, table, service, and storage bucket — with real-time health monitoring. ▶ Watch in full quality MP4 graph-go is a CLI-first infrastructure mapper. It auto-discovers your...

systempi

systempi Real-time Raspberry Pi system monitoring dashboard for Linux terminals with live telemetry, hardware health analysis, and low-flicker rendering. FEATURES Real-time CPU, RAM, swap, disk, and network monitoring Raspberry Pi hardware telemetry through vcgencmd Power, throttling, undervoltag...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...

deadair

deadair checks whether enabled SIEM detections still have the telemetry they need. It reports missing or stale data, ingest delays, and schema mismatches. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in...

CVE-2026-121024

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

CVE-2026-121024

AxsonSoft AxxonNet versions prior to 3.28.0 on Linux are affected by an Incorrect Authorization (CWE-863) vulnerability in the Health Monitoring service . A remote attacker who obtains a shared report token —intended only for read-only access—can exploit this flaw to create, modify, or delete mon...

CVE-2026-121024 Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

EUVD-2026-115711

Incorrect Authorization CWE-863 in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in possession of a shared report token, which is intended for read-only access, to create, modify or delete monitoring alerts via the monitoring API...

Malicious code in @ifasn/mdd-doc-mcp (npm)

Source: amazon-inspector 1d8295dd6d1f932aa9f2b865822f1a6f213e00fc288b35cd4b7d8fa0f07a8641 On load, index.js queries the Alibaba Cloud ECS instance metadata service at 100.100.100.200, performs the IMDSv2-style PUT to obtain a metadata token X-aliyun-ecs-metadata-token, then reads a base64-conceal...

MAL-2026-18487 Malicious code in @ifasn/mdd-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8295dd6d1f932aa9f2b865822f1a6f213e00fc288b35cd4b7d8fa0f07a8641 On load, index.js queries the Alibaba Cloud ECS instance metadata service at 100.100.100.200, performs the IMDSv2-style PUT to obtain a metadata toke...

Malicious code in @ifasn/mdd-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8295dd6d1f932aa9f2b865822f1a6f213e00fc288b35cd4b7d8fa0f07a8641 On load, index.js queries the Alibaba Cloud ECS instance metadata service at 100.100.100.200, performs the IMDSv2-style PUT to obtain a metadata toke...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action A lightweight PR guardrail for dependency updates. It scans new or changed dependencies only from your lock/manifest, pulls health and risk signals deps.dev + heuristics, flags fresh publishes, comments a report on the PR, optionally labels it for...

SUSE CVE-2026-115804

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability CVE-2026-115804 is fixed in Consul Community Edition 2.1.0 a...

cpra

Continuous Pulse and Recovery Agent Checks services, sends alerts, and runs the recovery actions you configure. CPRa monitors services and runs the recovery actions you configure. One Go process schedules checks, tracks incidents, sends notifications and exposes a React dashboard, an HTTP API and...

CVE-2021-21985

CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a...