330 matches found
freki
Freki est une plateforme d'analyse de malwares libre et open-source. Objectifs 1. Faciliter l'analyse de malwares et la rétro-ingénierie ; 2. Fournir une API REST facile à utiliser pour différents projets ; 3. Déploiement simple via Docker ; 4. Permettre l'ajout de nouvelles fonctionnalités par l...
GhostESP
ESP32를 위한 오픈소스 무선 연구 플랫폼. 1020달러짜리 ESP32 보드를 무선 연구 도구로 바꿔보세요 — 풀 터치스크린 UI, 납땜도 Arduino IDE도 필요 없습니다. GhostESP가 처음이신가요? 호환 기기를 준비하고 웹 플래셔로 5분 안에 실행해 보세요 — 드라이버도 빌드 툴체인도 필요 없습니다. ⭐️ GhostESP가 마음에 드시나요? 저장소에 Star를 눌러 주세요. 큰 도움이 됩니다. 2.x의 새로운 기능 v2.0 은 지금까지 가장 큰 업데이트였습니다: 재구축된 UI, 네이티브 앱 생태계, 확장된 무선...
Rocket.Chat
Лучшее безопасное решение с открытым исходным кодом для командных коммуникаций Rocket.Chat — это платформа для коммуникаций с открытым исходным кодом, безопасная и полностью настраиваемая, разработанная на TypeScript для организаций с высокими требованиями к защите данных. Мы — оптимальное решени...
prowler
Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...
DataEase - Remote Code Execution
DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n...
[SECURITY] Fedora 43 Update: pgadmin4-9.16-1.fc43
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
CVE-2026-34082
Dify is an open-source LLM app development platform. Prior to 1.13.1, the method DELETE /console/api/installed-apps//conversations/ has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue...
CVE-2026-43873
WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...
CVE-2026-40882
OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An authenticated user who can call the import endpoint may trigger XML external entity processing, which can lead to...
PT-2026-45867
Name of the Vulnerable Software and Affected Versions OpenCTI versions prior to 7.260227.0 Description An issue exists in the rendering of email-message observable body data where the content of the body field is not appropriately sanitized. This allows for Cross-Site Scripting XSS, a technique...
flowintel 安全漏洞
Flowintel is an open-source security analyst case and task management platform developed by flowintel. Versions of FlowIntel 3.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the external reference URL detection function in the app/case/task.py file, which has a...
Budibase 安全漏洞
Budibase is an open-source platform developed by Budibase in the UK. It allows for the creation of internal applications, workflows, and management panels within minutes. Versions of Budibase prior to 3.38.2 contained security vulnerabilities. These vulnerabilities stemmed from the failure to...
Fleet 安全漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...
SOCFortress CoPilot 授权问题漏洞
SOCFortress CoPilot is an open-source unified security operations platform developed by SOCFortress. Versions of SOCFortress CoPilot prior to 0.1.57 contained authorization-related vulnerabilities. These vulnerabilities stemmed from a hardcoded JWT signing key being used as a backup value, and th...
CVE-2026-41161 Username Enumeration via Timing Attack
Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by measuring the application's response time...
Sync in 安全漏洞
Sync in is an open-source server synchronization platform developed by Sync-in. Versions prior to 2.2.0 of Sync in contained a security vulnerability. This vulnerability stemmed from a logical flaw in the/api/auth/login endpoint, which could allow unauthorized remote attackers to enumerate valid...
langfuse 访问控制错误漏洞
Langfuse is an open-source large language model engineering platform developed by Langfuse. Versions 3.68.0 to 3.167.0 contained a access control vulnerability. This vulnerability stemmed from a role-based access control flaw in the LLM connection update process. It could allow low-privilege user...
EUVD-2026-27110
n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a malicious MCP OAuth client with a crafted clientname. If a victim user authorized the OAuth consent dialog and a second user subsequently revoked that...