DbDat

DbDat Db データベース評価ツール DbDat は、データベースのセキュリティを評価するために多数のチェックを実行します。実行されるチェックのカテゴリは、構成、権限、ユーザー、および情報です。チェックは、クエリを実行するか、データベース構成ファイルを読み取ることによって実行されます。このツールの目的は、即時の対応が必要な問題を強調し、適切性を確認すべき構成設定を特定することです。このツールは、アプリケーションの SQL インジェクションの脆弱性を特定するためのものではありません。そのための優れたツールは既に存在します 例:...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Seatbelt

Seatbelt Seatbeltは、攻撃的および防御的なセキュリティの観点から関連する、セキュリティ指向のホスト調査「安全確認」を実行するCプロジェクトです。 @andrewchiles氏のHostEnum.ps1スクリプトと@tifkin氏のGet-HostProfile.ps1は、収集する多くのアーティファクトのインスピレーションを提供しました。 @harmj0y氏と@tifkin氏がこの実装の主要な作成者です。 SeatbeltはBSD 3-Clauseライセンスの下でライセンスされています。 Table of Contents Seatbelt Table of Content...

mesh-kridik

mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...

OAUTHScan

OAUTHScan 説明 OAUTHScan は、OAUTHv2 および OpenID 標準を実装したアプリケーションのペネトレーションテスト中に役立つ、いくつかの自動セキュリティチェックを提供することを目的とした、Java で書かれた Burp Suite 拡張機能です。 このプラグインは、さまざまな OAUTHv2/OpenID の脆弱性と一般的な誤設定（両フレームワークの公式仕様に基づく）を探します。チェックの多くは、以下の参考文献に従って開発されています。 https://datatracker.ietf.org/doc/html/rfc6749...

trust-my-agent-ai

🛡️ TrustMyAgent OpenClaw エージェント向けセキュリティボディーガード ウェブサイト • トラストセンター • クイックスタート • コントリビューション OpenClaw エージェント向けの EDR ライクなセキュリティエージェントです。14 のドメインにわたる 41 のセキュリティチェックを実行し、信頼スコア（0-100）を計算し、集中管理されたトラストセンターダッシュボードにテレメトリを送信します。人間や他のエージェントが信頼性を検証できます。 ステートレス設計 – メモリ上で完全に実行され、ローカルに何も保存せず、ホストに痕跡を残しません。 なぜ必要か AI...

CLEANSTART-2026-CR72646 ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses

Security vulnerability affects the apache-hive package. The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses...

ROS-20260925-73-0018

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter component of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to compromise...

CVE-2026-84570

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks...

CVE-2026-65383

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-65383

CVE-2026-65383 affects macOS prior to macOS Golden Gate 27 . An application may bypass Gatekeeper checks , allowing it to evade macOS's application verification mechanism. The root cause is addressed with improved checks in the fixed release. The CVSS 3.1 score is 4.4 (Medium) with a local attack...

ROS-20260914-73-0062

The vulnerability of the Keyboard component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data and affect the integrit...

The vulnerability of the NS() function in the drivers/iommu/generic_pt/iommu_pt.h header of the Linux kernel allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the NS function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of protected information...

The vulnerability of the nf_conntrack_tcp_packet() function in the net/netfilter/nf_conntrack_proto_tcp.c module of the netfilter kernel of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter component of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise...

prowler v5.41.0

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...

The DCHECK Illusion: Chrome's Trusted Path Policy Creates Vulnerabilities

An analysis of Chrome Mojo IPC finding 296 DCHECK instances across mojo/core/ and mojo/public/cpp/bindings/lib/, at least 15 guarding security-relevant conditions bounds checks, offset validation, handle state with ZERO protection in release builds...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.

The vulnerability of the Secure Boot implementation for Windows operating systems is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

UBUNTU-CVE-2026-64393

In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...