CVE-2026-77243

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-77243

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to an authorization bypass in versions prior to 0.22.0 . The root cause is that while ENABLED_TOOLS and TOOLSETS are applied during tool listing, they are not rechecked when a tools/call request is dispatched. T...

CVE-2026-77243 MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

CVE-2026-77243 MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

policy_sentry

Policy Sentry IAM 최소 권한 정책 생성기. 튜토리얼 설치 패키지 관리자 셸 완성 1단계: 템플릿 만들기 2단계: ARN 복사/붙여넣기 3단계: write-policy 명령 치트 시트 정책 작성 치트 시트 IAM 데이터베이스 조회 치트 시트 로컬 초기화 선택 사항 기타 사용법 명령어 Python 라이브러리 사용법 Docker Terraform 참고 자료 문서 연습 및 전체 문서는 ReadTheDocs 프로젝트를 방문하세요. Policy Sentry에 대한 Salesforce Engineering 블로그 게시물을...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

cloudsplaining

Cloudsplaining Cloudsplaining은 AWS IAM 보안 평가 도구로, 최소 권한 위반을 식별하고 위험 우선순위가 매겨진 HTML 보고서를 생성합니다. 예제 보고서 문서 전체 문서는 ReadTheDocs의 프로젝트를 방문하세요. 설치 참고 시트 예제 보고서 개요 Cloudsplaining은 AWS IAM 정책에서 최소 권한 위반을 식별하고 예쁜 HTML 보고서를 생성합니다. AWS 계정의 모든 정책, 여러 AWS 계정에 걸쳐 스캔하거나 단일 정책 파일을 스캔할 수 있습니다. 리소스 제약 조건을 활용하지 않는...

nono

여러분께 Sigstore를 제공한 팀이 만들었습니다 PyPI, npm, brew, Maven Central에서 사용되는 안전한 소프트웨어 증명attestation 표준 !NOTE 1.0 릴리스에 앞서 API가 안정화되고 있습니다. 필요한 경우 API 변경이 여전히 발생할 수 있지만, 최소한으로 유지됩니다. !IMPORTANT 조직 마이그레이션: 공식 nono 레지스트리 네임스페이스가 always-further에서 nolabs-ai로 이동했습니다. 스크립트, 프로필, CI의 모든 참조를 업데이트하세요. 이미 이전 네임스페이스로 ...

CureIAM

CureIAM GCP 인프라의 과도한 권한을 가진 IAM 계정을 자동으로 정리 CureIAM은 GCP 클라우드 인프라에서 최소 권한 원칙을 적용하기 위한 사용하기 쉽고, 안정적이며, 성능이 뛰어난 엔진입니다. DevOps 및 보안 팀이 GCP 인프라에서 필요한 것보다 더 많은 권한이 부여된 계정을 신속하게 정리할 수 있도록 합니다. CureIAM은 GCP IAM 추천자Recommender로부터 권장 사항과 인사이트를 가져와 점수를 매기고, 매일 기본적으로 이러한 권장 사항을 자동으로 적용합니다. 일정 관리 및 대규모로 이러한 ...

pigeon

Pigeon あなたのエージェントがサブエージェントを生成し、同じAPIキーを渡しました。そのサブエージェントは、本番環境へのデプロイ、支払いデータベースの読み取り、mainへのマージができるようになりました。 Pigeonはそれを阻止します。子エージェントにはPigeon Pass を渡します。これは、あなたができることのコピーではなく、実行が許可された内容に絞り込まれた署名付き認証情報です。 インストール Python 3.12以降。 root@kitploit: git clone https://github.com/pigeonlabsHQ/pigeon.git cd pige...

CVE-2026-79944

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79693

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79693

Dell Secure Connect Gateway (SCG) 5.0 is affected by a Least Privilege Violation in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). A high-privileged attacker with local access could potentially exploit this flaw to gain unauthorized access to the system. The vulnerability ...

CVE-2026-79693

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

EUVD-2026-75049

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79944

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-79944

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain a Least Privilege Violation . A high-privileged attacker with local access could exploit this to gain unauthorized access, resulting in low impact on integrity and avai...

EUVD-2026-75047

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2026-87064

A flaw was found in konflux-operator-tasks. The GitHub workflows used by this component do not explicitly define their required permissions. This oversight means the workflows may inherit default access tokens that grant broader privileges than intended. Such excessive permissions could potential...

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins AuthZ under specific circumstances. The likelihood of this being exploited...