3075 matches found
Seatbelt
Seatbelt Seatbelt ist ein C-Projekt, das eine Reihe von sicherheitsorientierten Host-Umfragen "safety checks" durchführt, die sowohl aus offensiver als auch defensiver Sicherheitsperspektive relevant sind. Das Skript HostEnum.ps1 von @andrewchiles und Get-HostProfile.ps1 von @tifkin dienten als...
DbDat
DbDat Strumento di valutazione del database Db DbDat esegue numerosi controlli su un database per valutarne la sicurezza. Le categorie di controllo sono: configurazione, privilegi, utenti e informazioni. I controlli vengono eseguiti lanciando query o leggendo i file di configurazione del database...
dawnscanner
Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...
mesh-kridik
mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...
trust-my-agent-ai
🛡️ TrustMyAgent Guardia di sicurezza per agenti OpenClaw Sito web • Trust Center • Avvio rapido • Contribuire Un agente di sicurezza simile a EDR per agenti OpenClaw. Esegue 41 controlli di sicurezza in 14 domini, calcola un punteggio di fiducia 0-100 e invia la telemetria a una dashboard...
OAUTHScan
OAUTHScan Beschreibung OAUTHScan ist eine in Java geschriebene Burp-Suite-Erweiterung, die einige automatische Sicherheitsprüfungen bereitstellen soll, die bei Penetrationstests von Anwendungen, die die Standards OAUTHv2 und OpenID implementieren, nützlich sein können. Das Plugin sucht nach...
UBUNTU-CVE-2026-64393
In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...
PT-2026-64614
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, SMB2 SET INFO handlers call path-based VFS Virtual File System helpers after verifying the access mask of the SMB handle. These helpers perform owner, inode...
GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks
A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...
ROS-20260720-73-0021
The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...
rrdtool security update
1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264...
Symlink Attack
Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
CVE-2026-61859 ImageMagick before 7.1.2-26 Policy Bypass via script operation
ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...
EUVD-2026-44609
ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...
PT-2026-59057
Summary Two primitive integrators in apm-cli enumerate package files with bare Path.glob / Path.rglob calls and read each match with Path.read text, transparently following symbolic links. A symlink committed inside a remote APM dependency under .apm/prompts/.prompt.md or .apm/agents/.agent.md is...
CVE-2025-71367
picklescan before 0.0.34 fails to detect operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using operator.attrgetter in reduce methods to execute arbitrary code when pickle.load processes the file...
