trust-my-agent-ai

🛡️ TrustMyAgent OpenClaw エージェント向けセキュリティボディーガード ウェブサイト • トラストセンター • クイックスタート • コントリビューション OpenClaw エージェント向けの EDR ライクなセキュリティエージェントです。14 のドメインにわたる 41 のセキュリティチェックを実行し、信頼スコア（0-100）を計算し、集中管理されたトラストセンターダッシュボードにテレメトリを送信します。人間や他のエージェントが信頼性を検証できます。 ステートレス設計 – メモリ上で完全に実行され、ローカルに何も保存せず、ホストに痕跡を残しません。 なぜ必要か AI...

mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

Seatbelt

Seatbelt Seatbeltは、攻撃的および防御的なセキュリティの観点から関連する、セキュリティ指向のホスト調査「安全確認」を実行するCプロジェクトです。 @andrewchiles氏のHostEnum.ps1スクリプトと@tifkin氏のGet-HostProfile.ps1は、収集する多くのアーティファクトのインスピレーションを提供しました。 @harmj0y氏と@tifkin氏がこの実装の主要な作成者です。 SeatbeltはBSD 3-Clauseライセンスの下でライセンスされています。 Table of Contents Seatbelt Table of Content...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

DbDat

DbDat Db データベース評価ツール DbDat は、データベースのセキュリティを評価するために多数のチェックを実行します。実行されるチェックのカテゴリは、構成、権限、ユーザー、および情報です。チェックは、クエリを実行するか、データベース構成ファイルを読み取ることによって実行されます。このツールの目的は、即時の対応が必要な問題を強調し、適切性を確認すべき構成設定を特定することです。このツールは、アプリケーションの SQL インジェクションの脆弱性を特定するためのものではありません。そのための優れたツールは既に存在します 例:...

CVE-2026-84570

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks...

CVE-2026-65383

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-65383

CVE-2026-65383 affects macOS Golden Gate 27 and involves Gatekeeper , Apple's application verification mechanism. An app may bypass Gatekeeper checks , potentially allowing unauthorized or unsigned code to execute without the usual trust validation. The issue was addressed with improved checks in...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

OAUTHScan

OAUTHScan 描述 OAUTHScan 是一个用 Java 编写的 Burp Suite 扩展，旨在提供一些自动安全检测，这些检测在针对实现 OAUTHv2 和 OpenID 标准的应用进行渗透测试时可能很有用。 该插件会查找各类 OAUTHv2/OpenID 漏洞和常见错误配置（基于这两个框架的官方规范），其中许多检测项是根据以下参考资料开发的： https://datatracker.ietf.org/doc/html/rfc6749 https://datatracker.ietf.org/doc/html/rfc6819...

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...

UBUNTU-CVE-2026-64393

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...

PT-2026-64614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, SMB2 SET INFO handlers call path-based VFS Virtual File System helpers after verifying the access mask of the SMB handle. These helpers perform owner, inode...

GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...

ROS-20260720-73-0021

The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

ROS-20260716-73-0059

The vulnerability of the Fenced Frames privacy function in Microsoft Edge and Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML pag...

rrdtool security update

1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264...

Symlink Attack

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2026-61859 ImageMagick before 7.1.2-26 Policy Bypass via script operation

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...

EUVD-2026-44609

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...