Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — 로컬 방어 실습실 두 개의 도커화된 NGINX 인스턴스: 패턴 기반 "위험한 재작성" 스니펫 vs 수정된 명명된 캡처 스니펫, nginx:1.30.0-alpine / nginx:1.30.1-alpine에 고정됨. 스크립트는 무해한 curl을 실행하고, nginx -T를 덤프하며, 증거를 아카이브합니다. 구성 검토 교육 전용입니다 — /health, /nginxstatus, /legacy/는 실습실 엔드포인트입니다. 실습실 VLAN 외부 노출을 제한하십시오. 범위: 승인된 호스트...

scada-scanner

SCADA 스캐너 및 핑거프린터 개요 네트워크 전반의 산업 제어 시스템을 식별하고 핑거프린팅하기 위한 고성능 비동기 SCADA/ICS 스캐너입니다. 취약점을 탐지하고 공급업체/제품을 식별하며 종합적인 위험 보고서를 생성합니다. 경고: 승인된 보안 평가에만 사용하세요. 무단 스캐닝은 법률 및 규정을 위반할 수 있습니다. 기능 핵심 기능 CIDR 범위 또는 개별 대상에 대한 고속 비동기 스캐닝 주요 산업용 프로토콜 탐지 Modbus, S7, DNP3, BACnet, EtherNet/IP 등 공급업체, 제품, 버전 식별을 포함한 장...

Loracrack

Loracrack - LoRaWANセッションクラッカー 脆弱な、または共有されたアプリケーションキーを悪用するPoC Applied RiskのSipke Mellemaによって作成されました これは、複数のLoRaWANノードで同じAppKeyを使用することの危険性を実証するためのProof-of-Conceptです。 このリポジトリには、キャプチャしたパケットからLoRaWANセッションキーをクラックするためのツールボックスが含まれています。攻撃シナリオでは、AppKeyを知っているがハンドシェイクを見逃した場合、またはAppKeyがランダムではなく推測可能な場合を想定しています...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ssrf-атаки Обзор Информация о сайте производителя：https://maccms.pro Адрес загрузки исходного кода ： https://github.com/maccmspro/maccms10.git Подверженная версия: V2021.1000.2000 2. Детали уязвимости https://github.com/maccmspro/maccms10/issues/22 Войдите в...

Fedora 44 : rust-webbrowser (2026-0272e561a4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0272e561a4 advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

CVE-2024-58376

A flaw was found in Renovate's helmv3 manager. This command injection vulnerability allows an attacker with commit access to a repository to execute arbitrary commands. By manipulating registryAliases keys with unquoted shell metacharacters, an attacker can inject commands during helm repo add...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

EUVD-2026-52273

SiYuan: Cross-boundary metadata disclosure via getBlockInfo publish mode: reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered...

iocx v0.7.6.1

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

Risk-Analysis-Editor v3.0.0

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

Linux Distros Unpatched Vulnerability : CVE-2026-65109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix...

CVE-2026-80616

A flaw was found in the Linux kernel's ieee802154 component. An unnecessary warning message WARNON can be triggered when memory allocation fails in the cfg802154switchnetns function. This can lead to diagnostic messages being logged due to deliberate fault injections, but does not pose a direct...

PT-2026-84513

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...

ASB-A-524767048

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-84512

CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe...

PT-2026-84511

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

krane v0.1.6

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Linux Distros Unpatched Vulnerability : CVE-2026-66022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...