mcpsafetywarden

MCP Safety Warden è un server proxy che avvolge qualsiasi server MCP e aggiunge profilazione comportamentale, scansione di sicurezza, gating del rischio ed esecuzione sicura ai suoi strumenti...

layne

Layne Layne è un'app GitHub self‑hosted che centralizza la scansione di sicurezza nei nostri repository. Non utilizzando strumenti SAST/secrets commerciali e non avendo accesso a GitHub Enterprise, può diventare difficile mantenere diversi file di workflow GitHub Actions su repository differenti,...

GuardScan

🛡️ GuardScan 100% Gratuito e Open Source • CLI Privacy-First per la Scansione della Sicurezza e la Revisione del Codice AI root@kitploit: / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | |...

mcp-xray

MCP X-Ray Übersicht MCP X-Ray ist eine einheitliche Open-Source-Sicherheitsscan- und Penetrationstestlösung für Model Context Protocol MCP-Server. Es erzeugt produktionsreife SARIF-Berichte für die nahtlose Integration in Sicherheitstools und CI/CD-Pipelines. Suchergebnisse können optional auf...

foxguard

foxguard Scansione di sicurezza locale veloce per codice, segreti, dipendenze e rischio crittografico. root@kitploit: npx foxguard...

oxo

Motore di Orchestrazione delle Scansioni OXO OXO è un framework di scansione di sicurezza costruito per modularità, scalabilità e semplicità. OXO Engine combina strumenti specializzati per lavorare in modo coeso per trovare vulnerabilità ed eseguire azioni come ricognizione, enumerazione e...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

SafeForge

SafeForge – Wo Apps mit Vertrauen gebaut werden SafeForge ist ein Open-Source-Mobile-App-Hub , der auf GitLab basiert und es Entwicklern ermöglicht, mobile Anwendungen in einem sicheren, KI-verifizierten und vollständig verschlüsselten Ökosystem zu entwickeln, hochzuladen, zu teilen und...

CVE-2026-16268

creationtimestamp| type| source ---|---|--- 2026-08-17 06:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-16268.yaml 2026-08-18 00:00:03+00:00| confirmed|...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: gitlab-operator, gitlab-operator-fips, datadog-agent, tigera-operator, datadog-agent-fips, tigera-operator-fips...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: rclone, gitlab-rails-ce, kyverno-fips, chainloop-cli, amazon-ssm-agent, grafana-fips, external-secrets-operator-fips, rancher-fleet-fips, external-secrets-operator, packer-fips, skaffold-fips, grafana, syft-fips, cerbos, chainloop-cli-fips, terragrunt, argo-cd,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: kots, oauth2-proxy, rekor, kubescape, spire-server-fips, flux-kustomize-controller, gitsign, bank-vaults-fips, aactl, argo-workflows, vexctl, fulcio-fips, tekton-chains, spire-server, terragrunt, tkn, falcoctl-fips, cosign, fulcio, timestamp-authority-fips,...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: crossplane, gitlab-runner, chainloop-cli, bom, aactl, skaffold-fips, docker-compose-fips, kubescape-server-fips, chainloop-control-plane, chainctl-fips, zarf-fips, slsa-verifier, teleport, cosign-fips, chainloop-control-plane-fips, docker-compose, tekton-chains-fips,...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: openfga, podman, apko, goreleaser, k8sgpt, nerdctl, buildah, rancher-machine, buf, docker-credential-gcr, docker, osv-scanner, neuvector-scanner, aws-otel-collector, amazon-cloudwatch-agent-operator, rancher, undock, cluster-api, wolfictl, trivy, traefik, nuclei,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: skaffold, azure-workload-identity-webhook, kubernetes-dashboard-web, task, newrelic-nri-statsd, nerdctl, smarter-device-manager, fq, kubernetes-csi-external-health-monitor, docker-machine-driver-linode, kubernetes-csi-livenessprobe, cert-manager-cmctl,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: skaffold, buildkitd, openbao, grafana-alloy, secrets-store-csi-driver-provider-azure, wal-g, goreleaser, azcopy, minio, kubernetes-dashboard-auth, crossplane-provider-azure-managedidentity, tekton-chains, k3s, falcoctl, docker, crossplane-provider-azure, aactl, guac,...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

PYSEC-2026-1429 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Summary GuardDog's safeextract function does not validate decompressed file sizes when extracting ZIP archives wheels, eggs, allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data...

CVE-2025-71375 picklescan - Undetected Remote Code Execution via _operator.methodcaller

picklescan before 0.0.34 fails to detect the operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load...