VCG — Updated!

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: azurite, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, opensearch-dashboards, langfuse-fips, librechat, lerna, gitlab-rails-ce, opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips,...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: azurite, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, opensearch-dashboards, langfuse-fips, librechat, lerna, gitlab-rails-ce, opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips,...

CVE-2026-67319 vulnerabilities

Vulnerabilities for packages: azurite, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, arangodb, opensearch-dashboards, langfuse-fips, librechat, lerna, gitlab-rails-ce, opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana,...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: azurite, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, arangodb, opensearch-dashboards, langfuse-fips, librechat, lerna, gitlab-rails-ce, opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana,...

CVE-2026-67313 vulnerabilities

Vulnerabilities for packages: azurite, nextcloud-server, langfuse, kubeflow-centraldashboard, prism, arangodb, opensearch-dashboards, langfuse-fips, librechat, lerna, gitlab-rails-ce, opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, awx, gitlab-rails-ce-fips, kibana,...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, airflow, flyway, apache-pulsar, ruby4.0-jrjackson, apache-tika-fips, kafka-bridge-fips, pinot-fips, py3-vllm-cuda-12.4, celeborn, seata, trino, kafka-fips, ontop-fips, kserve-modelmesh, cass-config-builder-fips, druid, s3proxy, strimzi-kafka-operator,...

GHSA-6QM2-MCQ7-53QP vulnerabilities

Vulnerabilities for packages: camunda-zeebe, airflow, flyway, apache-pulsar, ruby4.0-jrjackson, apache-tika-fips, kafka-bridge-fips, pinot-fips, py3-vllm-cuda-12.4, celeborn, seata, trino, kafka-fips, ontop-fips, kserve-modelmesh, cass-config-builder-fips, druid, s3proxy, strimzi-kafka-operator,...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: lerna, langfuse, jitsucom-jitsu, opensearch-dashboards, nextcloud-server, prism, kubeflow-centraldashboard...

CVE-2026-78587

Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the activ...

CVE-2026-78587

Fleet Server (Elastic) contains an Incorrect Authorization (CWE-863) flaw where session ownership is not correctly verified during multi-part data upload operations. This allows any authenticated agent to interfere with active upload sessions belonging to other enrolled agents, resulting in a den...

my-dshrness-aipentest

DSH PenTest Workflow v4.2 A multi-agent penetration testing w...

-

Nanobot — Modular AI Agent Implementation Implement an open-s...

CURL-CVE-2026-80229 OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

OpenSSL provider use-after-free

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

escort-network-osint

陪护网络OSINT调查 概述 本项目分析跨多个平台的陪护相关列表网络，识别共享基础设施、身份复用和集中协调的模式。 目标 识别个人资料、电话号码与平台之间的关系 检测身份复用和轮换的模式 分析潜在的有组织活动指标 关键发现 电话号码在多个身份间被重复使用 存在单人、双人及团体形式的个人资料 跨平台分发策略 集中协调的强烈迹象 查看完整发现：findings/findings.md 数据结构 rawdata/ → 原始数据集（Excel） entities/ → 结构化实体（电话号码、人员、个人资料、平台） evidences/ → 截图与证据 analysis/ → 分析笔记...

SUSE CVE-2026-84199

Kyverno before 1.16.2 contains a server-side request forgery SSRF vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal...

CVE-2026-78587: Incorrect Authorization

Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the activ...

PT-2026-84731

Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the activ...