8306 matches found
RHEL 7 : abrt (RHSA-2026:48866)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48866 advisory. The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABR...
RHEL 8 : abrt (RHSA-2026:48819)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48819 advisory. The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABR...
PT-2026-66735
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...
Exploit for Relative Path Traversal in Fortinet Fortiweb
FortiWeb-cve-2025-64446-RCE-exploit Security research tool for...
CVE-2026-17817
An inappropriate implementation flaw was found in the ReportingAndNEL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517461759...
CVE-2026-17817
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
sysreptor v2026.61
An easy and customizable pentest reporting platform designed to simplify pentest report creation for security professionals. Playground • Ideas • Questions • Documentation • Features and Pricing • Installation • Buy SysReptor SysReptor is a fully customizable pentest reporting platform designed f...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
SUSE SLES16 Security Update : alloy (SUSE-SU-2026:22946-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22946-1 advisory. This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf:...
Vulnera
Strix The open-source AI pentesting tool. Autonomous AI h...
BIT-KIBANA-2026-63142 Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery
Incomplete List of Disallowed Inputs CWE-184 in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by t...
BIT-ELK-2026-63142 Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery
Incomplete List of Disallowed Inputs CWE-184 in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by t...
Web-Server-Log-Parser-Threat-Detector
Log threat detector A lightweight Python security tool that pa...
django-DefectDojo v3.1.300
DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...
CVE-2026-55973
A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...
DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense
Advanced Persistent Threats APTs are difficult to detect and interpret due to their multi-stage and stealthy nature. While recent autonomous defense systems leverage provenance graphs and learning-based models for detection and mitigation, their outputs remain largely machine-oriented and difficu...
globaleaks-whistleblowing-software v5.0.99
GlobaLeaks is free and open-source whistleblowing software enabling anyone to easily set up and...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...