matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS...

nightHawkResponse

nightHawk Response Пользовательское приложение для асинхронного представления криминалистических данных на базе Elasticsearch. Это приложение предназначено для загрузки файла "коллекций" Mandiant Redline и предоставления гибкости в поиске/накоплении и тегировании. Приложение родилось из-за...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2021-36750

CVE-2021-36749 Informazioni - Nel sistema di ingestion di Druid, InputSource viene utilizzato per leggere dati da una determinata fonte dati. Tuttavia, HTTP InputSource consente agli utenti autenticati di leggere dati da altre fonti rispetto a quelle previste, come il file system locale, con i...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

CVE-2026-51385

CVE-2026-51385 Advisory per CVE-2026-51385. Era necessario pubblicarlo perché GRAPHIFY non ha riconosciuto l'advisory e non lo ha pubblicato, e MITRE ha assegnato CVE-2026-51385, questo è l'advisory per essa. ES: Questa è stata la mia prima CVE, per essere onesto ho trovato un modo per rompere la...

Chromium: CVE-2026-79184 Missing authorization in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Riscrittura di ADExplorerSnapshot.py. Genera un .tar.gz di file JSON di BloodHound CE per l'ingestione. Si prega di consultare i problemi di questo progetto prima di usarlo. Non è ancora un sostituto drop-in. Installazione Binari precompilati per Linux e Windows sono...

CVE-2026-81491

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

EUVD-2026-66821

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CorelightForSecOps

Raccolta dei log di Corelight Sensor Questo documento descrive come raccogliere i log di Corelight Sensor configurando Corelight Sensor e un forwarder di Chronicle. Questo documento elenca anche i tipi di log supportati e le versioni di Corelight supportate. Per maggiori informazioni, consulta...

CVE-2026-47851

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

ShunyaNet-Sentinel

ShunyaNet Sentinel ATUALIZADO: 03/02/2026 O ShunyaNet Sentinel é um programa leve, com tema cyberpunk, que ingere feeds RSS ex.: notícias de última hora, redes sociais, os envia para um LLM para análise e entrega alertas e relatórios resumidos diretamente na GUI e no Slack em intervalos regulares...

flashingestor

flashingestor Una TUI per la raccolta di Active Directory. Filosofia Gli obiettivi principali di questo progetto sono: 1. Essere un ingestore dati completo compatibile con BloodHound CE Community Edition 2. Essere più veloce, meno rumoroso e più personalizzabile di altri collector 3. Fornire una...

Malcolm

Malcolm Malcolm ist eine leistungsstarke Netzwerkverkehrsanalyse-Toolsuite, die mit den folgenden Zielen entwickelt wurde: Einfach zu bedienen – Malcolm akzeptiert Netzwerkverkehrsdaten in Form von vollständigen Paketerfassungsdateien PCAP, Zeek-Protokollen und Suricata-Warnungen. Diese Artefakte...

PT-2026-82349

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-67621

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...

CVE-2026-67621 Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permissions can send direct HTTP requests to the upsert...