Kubernetes Security Scanning: A DevSecOps Guide

A clean container image is not proof of a secure Kubernetes workload. New CVEs, unsafe configurations, and excessive permissions can turn an approved deployment into an active exposure. Contact Hive Pro to review your Kubernetes container security priorities. Kubernetes security scanning is the...

osv-java-poc

OSV Scanner CVE Detection POC — Vulnerable Java App ⚠️ WA...

Exploiting LLM Agent Supply Chains Via Payload-Less Skills

Autonomous agents powered by Large Language Models LLMs acquire external functionalities through third-party skills available in open marketplaces. Adopting these integrations broadens the potential attack surface, prompting a need for systematic security evaluation. Current auditing mechanisms a...

Exploit for CVE-2026-24049

wheelaudit Python Wheel File Security Scanner — scan .wh...

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ CVE-2025-55182 Security Tools Complete toolset for detec...

MCP Watch 操作系统命令注入漏洞

MCP Watch is a comprehensive security scanning program for Model Context Protocol servers by the individual developer Kapil Duraphe. An operating system command injection vulnerability exists in MCP Watch version 0.1.2 and earlier, which stems from command injection and could lead to arbitrary...

EUVD-2020-7381

Malware in sbrugna...

Fedora 41 : lemonldap-ng (2025-67d99d2c39)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-67d99d2c39 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...

vuls

This is an open-source vulnerability scanner for Linux and FreeBSD, written in Go. It is an agentless scanner, meaning it does not require any additional software to be installed on the target systems. The scanner is designed to be easy to use and provides a simple command-line interface. The...

WordPress plugin Security Ninja 安全漏洞

WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...

Reolink Network Camera Detection

Binary data reolinknetworkcameradetect.nbin...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 9, 2025 to June 15, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

Rockwell Automation FactoryTalk Updater Web Client Detection

Binary data rockwellfactorytalkupdaterwebclientdetect.nbin...

Dell Trusted Device Installed (Windows)

Binary data delltrusteddevicewininstalled.nbin...

5 Impactful AWS Vulnerabilities You're Responsible For

If you're using AWS, it's easy to assume your cloud security is handled - but that's a dangerous misconception. AWS secures its own infrastructure, but security within a cloud environment remains the customer's responsibility. Think of AWS security like protecting a building: AWS provides strong...

Astrill VPN Installed (Windows)

Binary data astrillvpnwininstalled.nbin...

Fedora 41 : jupyterlab (2025-e50201543b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e50201543b advisory. Update to 4.3.6 rhbz2352545 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

LiteLLM Default Credentials

LiteLLM applies an authentication system with credentials that could have been suggested from the documentation. If these credentials are not modified, an attacker could access LiteLLM's interface and perform arbitrary actions. This detection is included in the AI and LLM category. No source data...

Linux Distros Unpatched Vulnerability : CVE-2024-57792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for...

Linux Distros Unpatched Vulnerability : CVE-2022-49221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dppanel DP CTS test case 4.2.2.6 has valid edid wit...