owLSM

🛡️ owLSM стремится стать золотым стандартом предотвращения и обнаружения для Linux 🛡️ owLSM — это агент eBPF LSM, реализующий механизм состояний правил Sigma, ориентированный на предотвращение. Что это за проект: owLSM сосредоточен на трёх основных вещах: 1 Возможности предотвращения с помощью...

cloud-custodian

Cloud Custodian c7n Cloud Custodian（c7n としても知られる）は、パブリッククラウドのアカウントとリソースを管理するためのルールエンジンです。ユーザーはポリシーを定義することで、セキュアかつコスト最適化された、適切に管理されたクラウドインフラストラクチャを実現できます。これは、組織が持つ多くのアドホックなスクリプトを、統合されたメトリクスとレポーティングを備えた軽量で柔軟なツールにまとめます。 Custodian は、AWS、Azure、GCP...

Hermes-Proxy

Hermes Proxy Hermes Proxy는 Electron과 Vite로 구축된 데스크톱 HTTP/HTTPS 가로채기 앱입니다. 요청/응답을 캡처하고, 요청을 재생하고, HAR 파일을 내보내기/가져오기할 수 있습니다. 기능 요청/응답 세부 정보가 포함된 실시간 트래픽 테이블 요청 재생 URL/헤더 편집 가능 모든 트래픽을 HAR로 내보내기 트래픽 테이블에 HAR 파일 가져오기 응답 본문 저장 메소드/호스트/URL/헤더를 일치시키고 요청을 지연시키거나, 헤더를 재정의하거나, 전체 응답을 재정의하거나, 연결을 종료하는 규칙 엔...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon — это бесплатное, с открытым исходным кодом, кроссплатформенное приложение для моделирования угроз, включающее построение системных диаграмм и механизм правил для автоматической генерации угроз/мер по смягчению. Это инкубаторный проект OWASP. Основное внимание...

CVE-2026-71235

A flaw was found in Magistrala's Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access...

CVE-2026-71235 Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine re/lua.go performs no input validation at all and preloads dangerous libraries: db arbitrary database access, ioutil file I/O, ...

CVE-2026-71235

CVE-2026-71235 affects Magistrala’s Rules Engine, where authenticated users can create rules with embedded Go or Lua scripts that execute server-side when IoT messages arrive. The Go engine (re/golang.go) runs scripts via Yaegi, exposing the full Go standard library (including os and net/http) wi...

CVE-2026-71235 Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine

Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. The Lua script engine re/lua.go performs no input validation at all and preloads dangerous libraries: db arbitrary database access, ioutil file I/O, ...

Exploit for CVE-2026-39842

CVE-2026-39842: OpenRemote Expression Injection RCE in Rules E...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the rules engine process. An attacker can execute arbitrary code on the server, read arbitrary files, steal environment variables including database credentials, and bypass multi-tenant isolation to access da...

CVE-2026-39842

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

CVE-2026-39842 OpenRemote is Vulnerable to Expression Injection

OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval...

GHSA-7MQR-33RV-P3MP Expression Injection in OpenRemote

Summary The OpenRemote IoT platform's rules engine contains two interrelated critical expression injection vulnerabilities that allow an attacker to execute arbitrary code on the server, ultimately achieving full server compromise. - Unsandboxed Nashorn JavaScript Engine: JavaScript rules are...

PT-2026-32964

Summary The OpenRemote IoT platform's rules engine contains two interrelated critical expression injection vulnerabilities that allow an attacker to execute arbitrary code on the server, ultimately achieving full server compromise. - Unsandboxed Nashorn JavaScript Engine: JavaScript rules are...

GHSA-9F3R-2VGW-M8XP File Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter

Description The resourcePatchHandler in http/resource.go validates the destination path against configured access rules before the path is cleaned/normalized. The rules engine rules/rules.go uses literal string prefix matching strings.HasPrefix or regex matching against the raw path. The actual...

PT-2026-25856

Name of the Vulnerable Software and Affected Versions File Browser versions 2.61.2 and below Description File Browser, a file managing interface, has an issue where an authenticated user with Create or Rename permissions can bypass administrator-configured deny rules. This is due to the order in...

CVE-2026-24904 TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In tlslistener.rs, TlsListener::listen peeks 1024 bytes and calls extractclientrandom.... If parsetlsplaintext fails for example, a fragmented/partial ClientHello split across TCP writes,...

CVE-2026-24904 TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello

TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In tlslistener.rs, TlsListener::listen peeks 1024 bytes and calls extractclientrandom.... If parsetlsplaintext fails for example, a fragmented/partial ClientHello split across TCP writes,...