417 matches found
csaf
The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
conti-pentester-guide-leak
conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...
security-tools-cheatsheets
Security Tools Cheatsheets...
openclarity
OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...
ekoparty
EKOPARTY MIAMI Overview Slides and materials for EKOPARTY Miami. Youtube Link: https://youtu.be/FdvrwQH7LYU?si=MVD8NMykO39dP0v9 Google video links are embedded within the PDF...
nmap-nse-scripts
NSENmap Scripting Engine 개발을 위한 저장소입니다. 제 스크립트비공식 포함, 라이브러리, 리소스 및 워크숍 관련 자료를 찾을 수 있습니다. TODO -Finishing SMB2 NSE 라이브러리 마무리 중 -Currently working on 비밀번호 변형 기능 작업 중 Paulino Calderon calderonwebsec.mx http://calderonpale.com...
CVE-2026-63242
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
MINI-XH2H-RWMC-JF58
Bulletin has no description...
MINI-4RHQ-XWMC-J5PQ
Bulletin has no description...
EUVD-2026-47486
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...
EUVD-2026-47463
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Web Services. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
EUVD-2026-46517
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Bill Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-61327
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...
CVE-2026-61283
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Web Services. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
Insignary Launches Clarity On-Demand: SBOMs, No Annual Commitment Required
Toronto, Canada, 15th July 2026, CyberNewswire...
PYSEC-2026-2387 AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache
Summary AWS Encryption SDK ESDK for Python is a client-side encryption library. An issue exists where, under certain circumstances, a specific cryptographic algorithm downgrade in the caching layer might allow an authenticated local threat actor to bypass key commitment policy enforcement via a...
MINI-3RHG-458C-5J6V
Bulletin has no description...
