gixy

GIXY Resumen Gixy es una herramienta para analizar la configuración de Nginx. El objetivo principal de Gixy es prevenir configuraciones de seguridad incorrectas y automatizar la detección de fallos. Actualmente, las versiones de Python compatibles son 2.7, 3.5, 3.6 y 3.7. Aviso: Gixy ha sido...

kube-linter

Static analysis for Kubernetes What is KubeLinter? KubeLinter analyzes Kubernetes YAML files, Helm charts, and Kustomize manifests, and checks them against a variety of best practices, with a focus on production readiness and security. KubeLinter runs sensible default checks, designed to give you...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

azure-security-auditor

Azure Security Posture Auditor Una herramienta CLI ligera, de estilo producción, que audita las configuraciones de seguridad de Azure y expone errores de configuración comunes — reflejando lo que Microsoft Defender for Cloud comprueba internamente. Comprobaciones...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Puntuación base: 6.5 MEDIO Escala: CVSS ⚠️ 📌 Descripción Este repositorio demuestra una falla de seguridad del tipo Clickjacking presente en el sitio del G1. La vulnerabilidad permite que un atacante cargue el sitio dentro de un iframe ,...

red-detector

Red-Detector 描述 使用 Vuls https://vuls.io/en/ 扫描您的 EC2 实例以发现其漏洞。 使用 Lynis https://cisofy.com/solutions/lynis 审计您的 EC2 实例以发现安全配置错误。 使用 Chkrootkit http://www.chkrootkit.org/ 扫描您的 EC2 实例以寻找 rootkit 迹象。 要求 1. 已配置的 AWS 账户，并具备以下 EC2 操作权限。包含这些要求的策略可在 red-detector-policy.json 中找到。 操作详情：...

GHSA-22G5-R2X5-97CX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CR32-G25G-VXJJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist...

CVE-2026-16019

creationtimestamp| type| source ---|---|--- 2026-08-19 16:08:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4hvptjp2m 2026-08-19 16:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth4lhxgtt25...

EUVD-2026-62405

stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second explicit acknowledgment. If that setting is carried into an environment where plugin directories are writable by less-trusted users, unsigned potentially malicious plugin code...

EUVD-2026-62205

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-66589 WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30...

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-21580

Confluence Data Center and Server versions 7.1.1 through 10.2.0 are affected by a Critical (CVSS 9.3) Stored XSS, privilege escalation, and security misconfiguration issue exploitable by unauthenticated attackers. Atlassian recommends upgrading to 9.2.21 or 10.2.13 or later; no in-the-wild exploi...

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-75926

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

EUVD-2026-61034

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...

CVE-2026-71573 Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...