cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

content-packs

Eventum 内容包 Eventum 的即用型生成器项目，可生成模仿真实 SIEM 数据源的逼真合成事件。每个生成器输出兼容 ECS 的 JSON，可直接导入 Elasticsearch、OpenSearch 或任何 SIEM 平台。 快速开始 使用 Docker（推荐） root@kitploit: git clone https://github.com/eventum-generator/content-packs.git cd content-packs docker compose up -d 这将启动 Eventum 服务器，端口为 9474 ，所有生成器可用。通过...

vol-rs

vol-rs A port of the Volatility 3 memory forensics framework from Python to Rust. It reads the same memory images, runs the same plugins with the same options, and prints the same output, byte for byte, a good deal faster. License This project is a port of Volatility 3 and is therefore an...

gitlab-profile

测试状态 : ↳ 核心编排器测试器 ↳ 文档测试器 创建日期: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ 此项目处于测试阶段！ 🎉 是的！我们很高兴宣布测试版即将完成！从版本 0.153 开始，所有针对首次 V1 发布流程的测试已启动！ root@kitploit: ░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░ ░░█▀▀░▀█▀░█▀█░█░█░▀█▀░█▀▀░░░░░░░░░░░░░░ ░░▀▀█░░█░░█░█░▄▀▄░░█░░▀▀█░░░░░░░░░░░░░...

CVE-2026-15382

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site's custom icon fonts with a single request...

CVE-2026-15382

The CVE concerns the Ultimate Addons for WPBakery Page Builder WordPress plugin (before version 3.21.4). The vulnerability arises because there is no capability or nonce check when deleting a site’s custom-uploaded icon font packs, allowing an unauthenticated attacker to permanently delete all cu...

Open Security Benchmark: Towards Autonomous Enterprise Cyber Defense

Enterprises are moving toward autonomous cyber defense: agentic AI that builds situational awareness of an organization's security state and reasons from it to assessments, decisions, and actions. This rests on a holistic view of the enterprise's security state, the continuous, cross-vendor pictu...

nono-cli'scregistry pack verification can fail open when provenance metadata is absent

Summary Registry-installed nono packs are expected to be verified from local provenance metadata before they are used. Two files are relevant: - /.config/nono/packages/lockfile.json - /.config/nono/packages///.nono-trust.bundle Testing shows that nono fails closed when a pack has a trust bundle b...

DarkPrompt

DarkPrompt !CIhttps://github.com/jason-allen-oneal/DarkPr...

Linux Distros Unpatched Vulnerability : CVE-2026-8593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without...

CVE-2026-48033 Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a forged Pulumi-URN logical name. This issue has been patched in version 1.4.0...

CVE-2026-48033 Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a forged Pulumi-URN logical name. This issue has been patched in version 1.4.0...

CVE-2026-48033 Hulumi: Policy packs bypassed by a forged Pulumi-URN logical name

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, policy packs can be bypassed by a forged Pulumi-URN logical name. This issue has been patched in version 1.4.0...

CVE-2026-48033

CVE-2026-48033 affects Hulumi before version 1.4.0. The vulnerability arises in the policy packs component: policy rules incorrectly trust URNs and can be bypassed when a developer names a resource with a trusted substring in the Pulumi-URN, allowing exemptions to be applied to resources that sho...

cy-ai-trainer (>=0.0.1, <=0.0.2), llama-index-packs-vanna (>=0.0.1, <=0.3.0) +2 more potentially affected by CVE-2026-65702 via vanna (>=0.0.30, <=2.0.2)

vanna PYPI version =0.0.30, =0.0.1, =0.0.1, =1.4.2, =1.0.0, =2.0.0 Source cves: CVE-2026-65702 Source advisory: SNYK:PYTHON-VANNA-18601852...

CVE-2026-8593

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...

CVE-2026-8593

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...

CVE-2026-8593

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...

CVE-2026-8593 Fix Business Intelligence API Pack permission

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...

EUVD-2026-46165

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...