PingCastleCloud

Ping Castle Cloud important: the source code has been moved to the main PingCastle project. this project is now archived. Introduction Ping Castle Cloud is a tool designed to assess quickly the AzureAD security level with a methodology based on risk assessment and a maturity framework. It does no...

Fedora 44 : rust-webbrowser (2026-0272e561a4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0272e561a4 advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

CVE-2024-58376

A flaw was found in Renovate's helmv3 manager. This command injection vulnerability allows an attacker with commit access to a repository to execute arbitrary commands. By manipulating registryAliases keys with unquoted shell metacharacters, an attacker can inject commands during helm repo add...

revera

Revera The credit score for npm packages. Revera helps you decide whether a package is worth installing before you run npm install. It analyzes package quality, maintenance, security, ecosystem health, and publisher trust — and now propagates risk transitively across your entire dependency graph ...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automatice el análisis de vulnerabilidades de seguridad, la evaluación de riesgos y la corrección en toda su base de código utilizando IA y el grafo de conocimiento de Orbit El Problema Los equipos de seguridad enfrenta...

Check Risk WAF

Check Risk WAF Российское комплексное облачное WAF-решение для защиты веб-приложений и инфраструктуры Russian integrated cloud WAF solution for web application and infrastructure protection Сайт · Документация · Русский · English Русская версия Check Risk WAF – это Российское комплексное облачное...

jeopardize

Introducción La herramienta Jeopardize está desarrollada para proporcionar capacidades básicas de inteligencia y respuesta contra amenazas de dominios de phishing al mínimo costo posible. Detecta candidatos a dominios de phishing registrados typosquatting, homógrafos, etc., los analiza y les asig...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

RiskAssessmentFramework

The OWASP Risk Assessment Framework Codacy Badge !GSOC...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gai...

kube-scan

Kube-Scan Try our free Kubernetes risk assessment tool today. Run it on any cluster at any time. No data leaves your cluster. We do not collect any information. For more information on Octarine see https://www.octarinesec.com. Get the risk score of your workloads Kube-Scan gives a risk score, fro...

PyRIT

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

CVE-2020-16898

This is an educational exercise. Use at your own risk. CVE-2020-16898 Exploit Windows Binary PoC root@kitploit: ./CVE-2020-16898.exe -t -u will run the exploit. ./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator See my other exploits here This is a lesson as to why you should not trust binaries ...

EUVD-2026-52273

SiYuan: Cross-boundary metadata disclosure via getBlockInfo publish mode: reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered...

osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website · OSINT Tools · Best OSINT Tools · AI OSINT Tools · llms.txt · AI Prompt Map OsintNET ...

iocx v0.7.6.1

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

OWASP-Top-10-AI-Infrastructure-Security-Risks

The Top 10 Data Center and AI Infrastructure Security Risks FORGE - Harden the metal beneath the model. 🌐 Website: https://forge-framework.io Executive Summary AI datacenters are being built faster than they are being secured. The rapid expansion of datacenters, GPU clouds, and specialized comput...