zeek-long-connections

Long Connections Zeek normally logs connections at the end of the connection, but this can cause trouble for incident responders in the case of very long lived connections that end up being unknown to defenders until too late. This package provides a new log named connlong which will log...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

starboard

Starboard se une a Trivy. Hemos anunciado nuestros planes de discontinuar Starboard y fusionarlo con Trivy. La CLI de Starboard se ha reintroducido como el comando trivy kubernetes y starboard-operator con un enfoque en las capacidades de trivy está disponible como Trivy-Operator. No aceptaremos...

censys-python

Censys Python 라이브러리 !WARNING 지원 중단 공지 : Censys Search v1 및 v2 API는 곧 지원이 중단될 예정입니다. 새로운 Censys Platform 으로 마이그레이션해 주세요. 📖 새 API 문서 : https://docs.censys.com/reference/get-started 📦 새 Python SDK : censys/censys-sdk-python 🖥️ 새 CLI 도구 cencli: censys/cencli ⚠️ 새 CLI를 사용하려면 먼저 이 패키지의 CLI를 제거해야 합니다. 둘 다...

OpenMetaData - SpEL Injection in PUT /api/v1/policies

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. CompiledRule::validateExpression is also called from PolicyRepository.prepare. prepare is called from...

proxmark3

Deprecated Iceman fork THIS FORK HAS BEEN DEPRECATED, USE RRG/ICEMAN REPO INSTEAD! Ref: Proxmark3 RDV4.0 github repository The RRG/Iceman repo is based upon this repo. Much development has been put into the RRG repo to bring support to all new hardware features. The repo fully support all of them...

advisories

This is deprecated. All advisories can be found on https://www.rcesecurity.com/advisories/...

zeekjs-notice-telegram

Zeek Notice Telegram ZeekJS edition This package re-implements zeek-notice-telegram in TypeScript ZeekJS to work around unreliability in ActiveHTTP. It borrows both Yacin's package above and the ZeekJS reimplementation of that package's original inspiration zeek-notice-slack which is now...

CVE-2026-0745

⚠️ Investigación de Seguridad y Aviso Legal - CVE-2026-0745 📌 Propósito de este Repositorio Este repositorio se proporciona estrictamente únicamente con fines educativos, académicos y de investigación de seguridad cibernética autorizada. Su objetivo es apoyar la comprensión de: Vulnerabilidades de...

CVE-2026-82841 UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

CVE-2026-82841 UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

CVE-2026-82841

The UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions before 1.26.8 and before 2.26.8.26 ) contains a vulnerability where it fails to perform a capability check in a routine that outputs stored remote storage settings. When a site is left in a specific post-migration state , this ...

WordPress WPLP Cookie Consent plugin < 4.4.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.4...

CVE-2026-92601 Guns through 8.3.5 Improper Access Control via SysNoticeController

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-66890

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01 2026-09-15 20:02:34+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o 2026-09-15 22:01:29+00:00| seen|...

CVE-2026-68953

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01...

CVE-2026-84533

creationtimestamp| type| source ---|---|--- 2026-09-15 04:49:53+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 20:50:27+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:01:32+00:00|...

CVE-2026-54334

creationtimestamp| type| source ---|---|--- 2026-09-14 21:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj35kwdxm2j 2026-09-14 22:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qknfnk2j 2026-09-15 12:30:05+00:00| seen|...