mzap

mzap mzap मल्टी-टारगेट ZAP स्कैनिंग के लिए एक Crystal CLI है। यह एक या अधिक ZAP API होस्ट पर लक्ष्यों को वितरित करता है, वैकल्पिक प्रतीक्षा मोड का समर्थन करता है, और रिपोर्ट निर्यात कर सकता है। विशेषताएँ स्कैन कमांड: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API परिभाषा आयात:...

rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

supply-chain-guard

Supply Chain Guard SCG Um kit de ferramentas de resposta a incidentes para ataques à cadeia de suprimentos npm/yarn e Python pip/poetry/uv — gratuito, local, sem dependências. SCG não é um mecanismo de varredura que compete com ferramentas comerciais em cobertura. É uma habilidade Claude Code e u...

Compose Aperisite

AperiSite Requisiti Docker; Docker Compose; Meno tempo per preparare l'ambiente, più tempo per comporre. Scarica root@kitploit: git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkou...

HTSOC

HTSOC — Laboratorio integrato di Security Operations Center HTSOC è un sistema SOC lab integrato, costruito per raccogliere log, rilevare eventi, generare alert, coordinare le indagini e inviare i risultati all'analista. CVE-2024-4577 è un use case di detection all'interno del sistema, non l'inte...

EUVD-2026-62908

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343 Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structured Query Language SQL queries through the Data Orchestration jobs endpoint, allowing for access to substantially all data stor...

CVE-2026-76343

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, the Data Orchestration jobs endpoint builds SQL queries from user-controlled job filter values without parameterized queries. A non-admin user can inject SQL, accessing all Data Orchestration data and stored credentials (CVSS...

PT-2026-78770

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Users without admin or power roles can execute arbitrary...

GO-2023-1900 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, argo-workflows-fips, kubeflow-pipelines...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, cloud-provider-gcp-cloud-controller-manager, rancher-system-agent, vcluster, yunikorn-k8shim, emissary, rancher-fleet, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: podinfo, addon-resizer, wire-go, capslock, spqr, terraform-provider-sendgrid, kubernetes-event-exporter, rancher-loglevel, buildkitd, gatus, nri-redis, nvidia-container-toolkit, http-echo, runc, kubernetes-release, openbao-k8s, aws-flb-firehose, direnv, paranoia,...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

Eopi-Hunt-Skill

Eopi-Hunt-Skill Authorized security research toolkit comb...

Agentic AI Security: The Chatbot Era Is Already Over

There is a diagram most security teams still carry in their heads when they think about AI. A user talks to a chatbot. The chatbot talks to a large language model. The model talks back. Put an inspection point in the middle, and the problem is solved. That diagram was accurate for about eighteen...

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

Las Vegas, United States, 4th August 2026, CyberNewswire...

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...