in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

ICPin

ICPin An Integrity-Check Monitoring Pintool What A pintool that records the reads and writes to the executable in memory. It also tracks dynamically executed code and handles some antidebug checks it is immune to most antidebug by pintools design and outputs backtraces of watched behavior. How...

CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC

🔓 CVE-2026-3502 - TrueConf Client Update Hijacking Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3502 - update vulnerability without integrity verification in TrueConf...

CVE-2026-85243

CVE-2026-85243 — camel-crypto-pgp: integrity-verification downgrade legacy packet skips the check Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the PGP data format's unmarshal verified the modification detection code only when the message used the OpenPGP...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.60 packages and security update

Red Hat OpenShift Container Platform release 4.18.60 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.75 packages and security update

Red Hat OpenShift Container Platform release 4.16.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

openshift-ansible: openshift-ansible: Installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

RHCOS 4 : OpenShift Container Platform 4.16.75 (RHSA-2026:95228)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95228 advisory. - openshift-ansible: openshift-ansible: Installer container downloads and executes remote inventory script without integrity verification...

RHCOS 4 : OpenShift Container Platform 4.14.78 (RHSA-2026:95507)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95507 advisory. - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing...

CVE-2026-104657

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

CVE-2026-104657 Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

CVE-2026-104657 Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

CVE-2026-104657

The Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows lacks integrity verification for downloaded components. An attacker can influence a release component to execute attacker-controlled code when a user runs the skill. Specifically on macOS, the skill stages package...

EUVD-2026-118358

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

CVE-2026-104657: Progress Software Fiddler Download & Setup Skill: Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows…

Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On macOS, the skill stages the package at ...

Security Bulletin: IBM Cloud Pak for Data Scheduling Service is affected by a vulnerability in github.com/docker/distribution (CVE-2026-85747).

Summary A manifest integrity verification vulnerability in github.com/docker/distribution affects IBM Cloud Pak for Data Scheduling Service CVE-2026-85747. This issue has been resolved in Scheduling Service 1.61.11 for IBM Cloud Pak for Data 5.3.1 and Scheduling Service 2.0.7 for IBM Cloud Pak fo...

CVE-2026-95749

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2026-95741

A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged authenticated attacker to gain elevated privileges on the affected system...

CVE-2026-95723

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

EUVD-2026-116200

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...