lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

popeye

Popeye: Linter de Cluster ao Vivo do Kubernetes Popeye é um utilitário que escaneia clusters Kubernetes ao vivo e relata potenciais problemas com recursos e configurações implantados. À medida que o panorama do Kubernetes cresce, está se tornando um desafio para um humano acompanhar a infinidade ...

CVE-2026-67620-poc

CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...

pac4j-check

pac4j-check 离线排查 CVE-2026-29000CVSS 10.0—— 包括官方 advisory 没有列出的那些包。 English | 中文 单个 jar,约 24KB,零运行时依赖,Java 8 起可用,完全离线,不外传任何数据。 这个漏洞是什么 org.pac4j:pac4j-jwt 的 JwtAuthenticator 在处理加密 JWTJWE 时未强制校验签名。 攻击者只要拿到服务器的 RSA 公钥公钥本来就是公开的, 就能构造一个 JWE 包裹的 PlainJWT,把 subject 和 role 写成任意值, 以任意用户身份登录,包括管理员 。无需任何凭据。...

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

CICD-Goat-Vapt-Writeup

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. Why this exists Most CI/CD security writeups either stay...

acp-framework-en

ACP — Agent Control Protocol Admission control for agent actions. Before any agent mutates system state, ACP answers four questions: Who is this agent? What are they authorized to do? Is this action policy-compliant? Can the outcome be traced to an accountable institution? Cryptographic identity ...

AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

CVE-2026-78364

The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admi...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

rt_redirectors

Ansible role जो modrewrite प्रॉक्सी नियमों के साथ किसी मौजूदा सर्वर पर एक redirector को शीघ्रता से तैनात करने की अनुमति देता है, Debian और Ubuntu का समर्थन करता है, Digital ocean और Azure में परीक्षण किया गया Redirectors, Ansible, और इस role पर एक गहन जानकारी के लिए ब्लॉग...

kube-monkey

kube-monkey is an implementation of Netflix's Chaos Monkey for Kubernetes clusters. It randomly deletes Kubernetes k8s pods in the cluster encouraging and validating the development of failure-resilient services. Join us at kube-monkey on Kubernetes Slack. kube-monkey runs at a pre-configured hou...

kube-monkey

kube-monkey, Kubernetes क्लस्टरों के लिए Netflix's Chaos Monkey का एक कार्यान्वयन है। यह क्लस्टर में Kubernetes k8s पॉड्स को बेतरतीब ढंग से हटाता है, जिससे विफलता-सहिष्णु सेवाओं के विकास को प्रोत्साहन और मान्यता मिलती है। हमसे Kubernetes Slack पर kube-monkey से जुड़ें। kube-monkey कार्यदिवसों पर ...

EUVD-2026-68158

The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admi...

CVE-2026-78364

MW WP Form is a WordPress plugin that, in versions before 5.1.6 , fails to sanitise and escape certain form settings before outputting them on an admin dashboard page. The vulnerability, specifically via the Inquiry Data List , allows users with a role as low as Editor to perform a Stored Cross-S...

CVE-2026-78364 MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admi...

Pentest-Cheat-Sheet

पेंटेस्ट चीट शीट बाहर बहुत सारी चीट शीट हैं, लेकिन यह मेरी है। यह अभी एक कार्य प्रगति पर है, और एक रफ ड्राफ्ट के रूप में रहती है जिसे बहुत , कभी-कभी अपडेट किया जाता है। मैंने इसे OSCP की पढ़ाई करते समय शुरू किया था, लेकिन अब यह और अधिक व्यावहारिक चीज़ों को शामिल करने के लिए विकसित हो रहा है जिनकी...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

content

स्वागत है! इस परियोजना का उद्देश्य विभिन्न प्लेटफार्मों — Red Hat Enterprise Linux , Fedora , Ubuntu , Debian , SUSE Linux Enterprise Server SLES ,... — के साथ-साथ उत्पादों — Firefox ,... के लिए सुरक्षा नीति सामग्री बनाना है। हमारा लक्ष्य सभी सामान्यतः उपयोग किए जाने वाले प्रारूपों में नई सुरक्षा...