FREEDOM Administration - Default Login

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

CVE_Demo

CVEDemo Hallo, ich bin Muhammad Navaid Zafar Ansari. Ich habe dieses Repository erstellt, um meine CVE-Demos zu pflegen und Empfehlungen zur Behebung an alle zu geben, die diese Anwendungen nutzen möchten, in denen ich die Schwachstellen gefunden habe. Haftungsausschluss: Alle Demos wurden...

the-endorser

🚨 The Endorser não é mais mantido. Se você precisar de suporte ou consultoria para seus empreendimentos OSINT, envie-me um e-mail para [email protected] 🚨 The Endorser Uma ferramenta OSINT que permite traçar relacionamentos entre pessoas no LinkedIn através de endossos/habilidades. Confira o...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

securix

SécurixOS: Sistema operativo base per postazioni sicure !NOTE Questo progetto è in alpha , al momento non viene fornito alcun supporto. Obiettivi SécurixOS è una distribuzione NixOS sviluppata dalla DINUM per equipaggiare computer sicuri per l'amministrazione di sistema, l'ufficio e lo sviluppo, ...

kube-score

kube-score kube-score é uma ferramenta que realiza análise estática de código das definições de seus objetos Kubernetes. A saída é uma lista de recomendações do que você pode melhorar para tornar sua aplicação mais segura e resiliente. Você pode testar o kube-score no navegador com a...

XStream 1.4.18 - Remote Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

maritime-security-paper

Documento di Ricerca sulla Sicurezza Marittima Ricerca completa sulle vulnerabilità di sicurezza nei veicoli marittimi autonomi e raccomandazioni difensive 📄 Panoramica Questo repository contiene il documento di ricerca completo sulla sicurezza marittima, la documentazione e i materiali...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

privacytools.io

Crittografia contro la sorveglianza di massa globale. Contribuire Questo progetto è archiviato. Consulta il nostro post Welcome to Privacy Guides per maggiori informazioni. Il nostro progetto è ora proseguito su Privacy Guides. È importante che un sito web sulla privacy sia aggiornato. Tieni...

mi-x

Am I Exploitable? Autore: 2022 - Oggi, Rezilion Descrizione: Validazione delle vulnerabilità Sviluppo: Gennaio 2022 - Oggi Documentazione: Vedi sito web, README Introduzione Descrizione 'Am I Exploitable?' è un progetto open source in Python che risponde all'esigenza di verificare se il proprio...

Moderate: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image

A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-frontend-rhel9 container image

A new satellite/iop-advisor-frontend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services...

Moderate: Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-rhel9 container image

A new satellite/iop-host-inventory-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

EUVD-2026-53856

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...

Important: python

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...

An analysis of incidents at Brazilian educational institutions

Introduction Because of the amount of data that can be obtained and the high impact that successful attacks may have, educational institutions are frequent targets of cybercriminals. Both public and private schools and universities rely on software for managing personally identifiable information...

CVE-2026-65100 Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the peer decoder and corrupts subsequent header blocks on the connection. This issue affects Apache Traffic Server: from...