CVE-2026-54248 Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration

Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior to version 0.90.1, a trust-boundary flaw in OCI artifact verification allowed artifact-provided deployment config to influence the policy used to verify tha...

CVE-2026-54248

Doco-CD , a GitOps continuous delivery tool for Docker Compose projects and Swarm stacks, contains an OCI trust-policy bypass prior to version 0.90.1 . A trust-boundary flaw allowed artifact-provided .doco-cd.yml configuration (with oci.verify: false) to override the global OCI_TRUST_POLICY, caus...

CVE-2026-89758

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway Puerta de enlace de seguridad en tiempo de ejecución para AI Agent: vincula criptográficamente cada llamada de herramienta a la finalización real del modelo, con ejecución de políticas de confianza cero, aislamiento en sandbox y aprobación humana...

BadSamba

DESCRIPCIÓN Este módulo se utiliza para explotar la ejecución de scripts de inicio mediante la configuración de directivas de grupo de Windows cuando están configuradas para ejecutarse desde un recurso compartido SMB remoto. Las directivas de grupo de Windows se pueden utilizar para configurar...

flash-xdomain-xploit

Autor: Gursev Singh Kalra [email protected] Evadiendo la Same Origin Policy con Flash y un crossdomain.xml inseguro Compilación y despliegue del código ActionScript de prueba de concepto 1. Descargue e instale el SDK de Apache Flex. Incluye un compilador de ActionScript. 2. Copie el código...

flash-xdomain-xploit

Autor: Gursev Singh Kalra [email protected] Evadiendo la política de mismo origen con Flash y crossdomain.xml inseguro Compilando e implementando el código ActionScript de prueba de concepto 1. Descargue e instale Apache Flex SDK. Viene con un compilador de ActionScript. 2. Copie el código...

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC Browser para Android Universal XSS UXSS Material PoC para CVE-2026-78997 — Universal Cross-Site Scripting en UC Browser para Android com.UCMobile.intl, versión 13.7.8.1314, divulgado por Omri Inbar Novee. Un XSS reflejado en el dominio incluido en la lista blanca del puente...

conductai

Conduct Governance for AI agents. Ship in 60 seconds. Built for engineering teams. Install in 10 minutes. Evidence for the CISO from day one. 60-second trial no install...

CVE-2026-87447

A flaw was found in the Network component of Google Chrome. This vulnerability, stemming from incorrect authorization, could allow a remote attacker to bypass the web origin policy. By leveraging social engineering and a specially crafted Chrome extension, an attacker could potentially gain...

CVE-2026-87442

A flaw was found in Prerender in Google Chrome. A remote attacker who has compromised the renderer process could exploit a confused deputy vulnerability by crafting a malicious HTML page. This could potentially allow them to bypass the web origin policy, which is a fundamental security mechanism...

CVE-2026-87436

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an incomplete cleanup vulnerability in the browser. This could allow the attacker to bypass the web origin policy through a specially crafted extension, potentially leading to unauthorized access to...

Securekit

Securekit Securekit protects what your models execute—across any AI system. Securekit is a protocol-agnostic security kernel for AI tool execution. It sits between any LLM or agent system and the tools they use, enforcing zero-trust execution, sandbox isolation, and policy-driven control. It is...

GPOCrack

GPOCRACK.py Descifrador/decifrador de cpassword de Preferencias de Directiva de Grupo de Active Directory. Cómo usar python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...

Vulnerability-Disclosure-Policy

Política de divulgación de vulnerabilidades Creemos que la divulgación de vulnerabilidades es una calle de doble sentido. Tanto los proveedores como los investigadores deben participar en la divulgación coordinada de vulnerabilidades. Cuando Enable Security descubre vulnerabilidades a través de s...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

security_monkey

注意：Security Monkey 已进入维护模式，将于 2020 年停止服务。 AWS 用户请使用 AWS Config。 GCP 用户请使用 Cloud Asset Inventory。 Security Monkey Security Monkey 可监控您的 AWS 和 GCP 账户，检测策略变更并针对不安全配置发出警报。支持 OpenStack 公有云和私有云。Security Monkey 还可监视您的 GitHub 组织、团队和仓库。 它提供一个单一界面，用于浏览和搜索您所有的账户、区域和云服务。这只猴子会记住先前的状态，并准确显示更改了什么内容以及何时更改。...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

reposaur

Reposaur Reposaur es la herramienta de cumplimiento de código abierto para plataformas de desarrollo. Audita, verifica y reporta tus datos y configuraciones fácilmente con políticas predefinidas y/o personalizadas. Soporta GitHub. Soporte para GitLab, BitBucket y Gitea próximamente. ⚠️ antes de...