EUVD-2026-70493

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-35160

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

zafrida-ui v0.3.7

中文 | English ZAFrida UI - PyCharm Frida Plugin Current Version: 0.3.6 Project Introduction Frida GUI Tool for PyCharm/IntelliJ ZAFrida UI is a Frida graphical interface plugin integrated into PyCharm and JetBrains IDEs. It aims to solve the complexity of Frida command-line operations and script...

Vulnerabilities found in Aruba Networks ArubaOS-CX

Aruba Networks has identified several vulnerabilities in the AOS-CX network operating system and its related components, including the command line interface, API endpoints, and web-based management interface. The vulnerabilities in AOS-CX include unauthorized access through authentication...

ssh-hardening

SSH 强化 在 Debian/Ubuntu 上一键锁定 SSH：新端口、禁止 root 登录、基于密钥的身份验证、可选的 UFW 和 Fail2Ban。 你将看到的内容 运行脚本时，它会检测你的操作系统，并在询问是否继续之前显示设置： 快速入门（分步操作） 1️⃣ 安装 git（如果需要） 在 Debian/Ubuntu 上： root@kitploit: sudo apt-get install -y git 2️⃣ 克隆仓库并进入文件夹 root@kitploit: rm -rf ssh-hardening git clone...

SharpSCOM

SharpSCOM 一个用于与 Microsoft System Center Operations Manager SCOM 交互的 C 工具。 该工具已在 SCOM Server 版本 10.22.10118.0 上完成测试。 SSPI 集成通过 Kevin Thompson antiduh 发布的 nsspi 库提供，该库以 BSD-2 许可证发布。 命令行用法 root@kitploit: █▀ █ █ ▄▀█ █▀█ █▀█ █▀ █▀▀ █▀█ █▀▄▀█ ▄█ █▀█ █▀█ █▀▄ █▀▀ ▄█ █▄▄ █▄█ █ ▀ █ 作者：Matt Johnson @breakfi...

BloodSOCer

BloodSOCer BloodSOCer 是一款 Python 自动化工具，它聚合来自多个来源的威胁情报数据（Mitre ATT&CK、Sigma 规则、Atomic Red Team），并生成 OpenGraph 格式的 JSON 文件以导入 BloodHound。如果配置中定义了 API Token，BloodSOCer 还可以将文件上传到 BloodHound，并为自定义对象设置图标。安全分析师可以随后从任意角度可视化这些数据，同时项目还提供了一些 Cypher 查询，帮助您快速上手。 目标 这个项目背后的想法是帮助 SOC 绘制其对 Mitre ATT&CK...

Vulnerabilities in HPE Networking Fabric Composer

HPE has identified several vulnerabilities in HPE Networking Fabric Composer. These vulnerabilities relate to authentication bypasses, privilege escalations, remote code execution, command injection, cross-site scripting XSS, denial-of-service attacks, arbitrary file writing, path traversal, and...

skillscript v0.40.1

Safe, reusable automation authored by agents. skillscript.ai • docs TL;DR — npm install -g skillscript-runtime && skillfile init && skillfile dashboard. See Quickstart. What is Skillscript? Skillscript came from asking: what would a Makefile look like if it built skills instead of binaries? The...

Security update for lcms2

This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for postgresql16

This update for postgresql16 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue: CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop bsc1271995. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

Security update for file-roller

This update for file-roller fixes the following issue: CVE-2026-78322: stack buffer overflow in parseprogressline for 7z and RAR handlers bsc1276442. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

Security update for cpio

This update for cpio fixes the following issues: CVE-2026-66484: path traversal allows creating hard links outside intended directory via malicious tar archives bsc1274856. CVE-2026-66485: denial of service via uncontrolled memory allocation from crafted archives bsc1274857. CVE-2026-66486:...

Security update for curl

This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...

HoneyWire hub/v2.1.0

HoneyWire 📋 Table of Contents Overview Showcase The Universal Event Standard Features Architecture Quick Start Guide Security Notes Tech Stack Roadmap & Development Versioning and API Reference Overview HoneyWire is a lightweight, Distributed High-Signal Security Early-Warning System Builder,...

nexus-os

Nexus OS El Sistema Operativo de IA Agéntica Gobernado 66 Crates | 675 Comandos | 86 Páginas | 5,229 Pruebas | 10/10 OWASP | Cero Stubs Local-first. Aislable de red. Preparado para post-cuántico. Construido en Rust. Arquitectura | Inicio Rápido | Características | Estado de la Auditoría |...

mcp-stdio-shellguard

StudioMeyer MCP Stack 的一部分 — 在马略卡岛构建 🌴 · 如果使用请⭐ mcp-stdio-shellguard 针对 MCP stdio 服务器的深度防御捆绑包。使用白名单 + 沙箱 + 重放检测包装 childprocess.exec/spawn，外加一个 AST 审计 CLI mcp-shellguard-audit，用于扫描 MCP 服务器源中未清理的 shell 调用。封堵了 Ox-Security MCP stdio-RCE 漏洞类别（200k 台易受攻击服务器，2026 年 5 月披露）。 MCP spec : 2025-06-18 SDK :...

Vulnerabilities found in Cisco Nexus 9000 Series, iOS XR Software, and Secure Email

Cisco has identified vulnerabilities in Cisco Nexus 9000 Series switches with Silicon One technology, Cisco IOS XR software, and Cisco Secure Email. The most serious vulnerability affects Nexus 9000 switches: when TCP ports 43210 or 43211 are accessible, an attacker can execute commands without a...