metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by CVE-2026-114097 via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: CVE-2026-114097 Source advisory: MEND:CVE-2026-114097...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by CVE-2026-114096 via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: CVE-2026-114096 Source advisory: MEND:CVE-2026-114096...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by CVE-2026-114095 via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: CVE-2026-114095 Source advisory: MEND:CVE-2026-114095...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by CVE-2026-114094 via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: CVE-2026-114094 Source advisory: MEND:CVE-2026-114094...

CVE-2026-100169

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

EUVD-2026-101295

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169

The Prowler API (versions 5.4.0 to before 5.35.0) contains an improper authentication vulnerability in its social account linking path. The root cause is that ProwlerSocialAccountAdapter.pre_social_login() links Google or GitHub logins to any existing local account with a matching email address w...

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

CVE-2026-100169: Improper Authentication

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

PT-2026-113771

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre social login in...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

aws-security-assessment-solution

Soluciones de evaluación de seguridad de autoservicio v2.0 La ciberseguridad sigue siendo un tema muy importante y un punto de preocupación para muchos CIOs, CISOs y sus clientes. Para abordar estas importantes preocupaciones, AWS ha desarrollado un conjunto principal de servicios que los cliente...

prowler

Prowler Prowler es un escáner de vulnerabilidades de red implementado en un clúster de Raspberry Pi, desarrollado por primera vez durante el hackathon de la comunidad de seguridad informática de Singapur - HackSmith v1.0. Capacidades Escanear una red una subred particular o una lista de direccion...

prowler (>=5.9.0, <=5.29.3), prowler-cloud (>=5.9.0, <=5.29.2) potentially affected by CVE-2026-114094 via dulwich (0.23.0)

dulwich PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - prowler =5.9.0, =5.9.0, =5.29.2 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

anji-common-addons (>=0.3.0, <=0.3.2), anji-core (>=0.8.3, <=0.8.11) +9 more potentially affected by CVE-2026-114094 via dulwich (>=1.0.0, <=1.2.6)

dulwich PYPI version =1.0.0, =0.3.0, =0.8.3, =1.10.0, =0.3.1, =5.30.0, =5.30.0, =0.1.9, =0.2.1 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...