ThreatSentry-AI

ThreatSentry AI: أداة صيد التهديدات المدعومة بالذكاء الاصطناعي أتمتة اكتشاف الأصول الخارجية، وإثراء ذكي ببيانات متعددة المصادر، والاستفادة من التعلم الآلي الجماعي للتنبؤ بالمخاطر وترتيب أولوياتها. حوّل إرهاق التنبيهات إلى استخبارات قابلة للتنفيذ. 🚀 بيان المهمة ThreatSentry AI تقضي على إرهاق تنبيه...

IBM Data Risk Manager - Authentication Bypass via SAML

IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a specially crafted HTTP request to the SAML idpSelection endpoint, allowing them to bypass the...

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. id: CVE-2018-15961 info: name: Adobe ColdFusion - Unrestricted File Upload...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH Script di Audit per Agenti AI di ServiceNow v1.1 Gen 2026 Assicura il tuo futuro AI – Strumento di Audit di livello enterprise con aggiornamenti 2026 Questo script controlla gli Agenti AI di ServiceNow per vulnerabilità come CVE-2025-12420, lacune di governance e rischi di...

OWASP-MCP-Governance-and-Risk-Project

Questo repository non contiene un README...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. Mor...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 Vulnerabilidade de alto risco CVE-2026-43499, implementação no kernel 5.10 e MediaTek MT6983V...

AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices

Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the device...

Malicious code in dext-crate-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3becb032c5eb2c6055f81b9fc5dbd5d5c517d1c4028810110bd1b202ec4742e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Nexora

Nexora Nexora è un sistema intelligente di governance degli endpoint e sicurezza informatica basato su AI, che monitora l'utilizzo del software sui dispositivi, applica una classificazione del rischio basata su policy e genera report strutturati comportamentali e di sicurezza. È progettato per...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...

Astra Linux – Vulnerability in Thunderbird

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text is never displayed to the user. This is because the text is interpreted as a MIME message, and the first paragraph is always treated as part of an email header section. A digitally signed text...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124 – Fixed a potential overflow issue due to non-sequential channel numbers. Channel numbering must start at 0, and there should be no gaps between channels. Otherwise, it’s possible to exceed the available storage...

Internet-Scanner

Scanner di Rete Locale Un'interfaccia GUI Tkinter che scansiona una rete IPv4 locale ARP + probe nmap, mostra i dispositivi, permette di eseguire scansioni complete delle porte ed esportare i risultati. Panoramica rapida Scansione ARP per scoprire i dispositivi sulla LAN. Probe nmap migliorati pe...

Check Risk WAF

Check Risk WAF वेब अनुप्रयोगों और बुनियादी ढांचे की सुरक्षा के लिए रूसी एकीकृत क्लाउड WAF समाधान वेब अनुप्रयोग और बुनियादी ढांचे की सुरक्षा के लिए रूसी एकीकृत क्लाउड WAF समाधान साइट · दस्तावेज़ीकरण · रूसी · अंग्रेज़ी रूसी संस्करण Check Risk WAF – यह एक रूसी एकीकृत क्लाउड WAF वेब एप्लिकेशन फायरवॉल...

hacksguard

Hacksguard 0.2 - Rasend schnelles TUI-Malware-Analysetool 🛡️ Hacksguard ist ein blitzschnelles, multithreaded Terminal-UI TUI-Tool zur statischen Analyse, das für SOC-Analysten, Threat Hunter und Reverse Engineers entwickelt wurde. Es wurde vollständig in Rust geschrieben und bietet ein intuitives...

Teach-AppSec

Teach-AppSec Teach AppSec ist ein OWASP Application Security Projekt, das derzeit Lehrmodule für Risikomanagement, Softwareentwicklung und Betriebssicherheit umfasst. Weitere Module werden diesem Projekt hinzugefügt, sobald sie entwickelt werden. Dieses Projekt wird unter der GNU General Public...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

gp_netSecDSS

netSecDSS Sistema di supporto alle decisioni per la valutazione del rischio della sicurezza di rete e di sistema nelle PMI Una piattaforma di monitoraggio della sicurezza di rete basata su Docker, progettata per piccole e medie imprese che non possono permettersi strumenti SIEM commerciali. Simul...