gixy

GIXY 개요 Gixy는 Nginx 구성을 분석하는 도구입니다. Gixy의 주요 목표는 보안 구성 오류를 방지하고 결함 탐지를 자동화하는 것입니다. 현재 지원되는 Python 버전은 2.7, 3.5, 3.6, 3.7입니다. 면책 조항: Gixy는 GNU/Linux에서만 잘 테스트되었으며, 다른 OS에서는 문제가 있을 수 있습니다. 제공 기능 현재 Gixy는 다음을 탐지할 수 있습니다: ssrf 서버 사이드 요청 위조 httpsplitting HTTP 분할 origins referrer/origin 검증 문제...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

kube-linter

Kubernetes용 정적 분석 KubeLinter란 무엇인가? KubeLinter는 Kubernetes YAML 파일, Helm 차트 및 Kustomize 매니페스트를 분석하고, 프로덕션 운영 준비성과 보안에 중점을 두고 다양한 모범 사례를 기준으로 검사합니다. KubeLinter는 Kubernetes YAML 파일, Helm 차트 및 Kustomize 매니페스트에 대한 유용한 정보를 제공하도록 설계된 합리적인 기본 검사를 실행합니다. 이는 팀이 보안 오구성 및 DevOps 모범 사례를 조기에 자주 확인하는 데 도움을 주기 ...

red-detector

Red-Detector Описание Просканируйте ваш EC2-экземпляр для поиска уязвимостей с помощью Vuls https://vuls.io/en/. Проверьте ваш EC2-экземпляр на наличие ошибок конфигурации безопасности с помощью Lynis https://cisofy.com/solutions/lynis. Просканируйте ваш EC2-экземпляр на наличие признаков руткита...

azure-security-auditor

Azure Security Posture Auditor Azure 보안 구성을 감사하고 일반적인 잘못된 구성을 표면화하는 가볍고 프로덕션 스타일의 CLI 도구입니다. Microsoft Defender for Cloud가 내부적으로 수행하는 검사를 그대로 반영합니다. 점검 항목 ID| 카테고리| 점검 항목| 심각도 ---|---|---|--- AZ-001| RBAC| 구독 범위에 Owner / Contributor 할당됨| CRITICAL AZ-002| RBAC| 리소스 그룹 범위에 Owner / Contributor 할당됨|...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – 보안 구성 오류 ClickJacking ⚠️ 기본 점수: 6.5 중간 척도: CVSS ⚠️ 📌 설명 이 저장소는 G1 사이트에 존재하는 Clickjacking 유형의 보안 취약점을 시연합니다. 이 취약점으로 인해 공격자는 사이트를 iframe 안에 로드하여 사용자를 속이기 위한 악성 요소를 겹쳐 표시할 수 있습니다. ⚠️ Clickjacking이란? ClickjackingUI Redressing이라고도 함은 사용자가 인지하지 못하는 사이에 합법적인 페이지와 상호작용하도록 속이는 공격입니다. 이는...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability stemming from improper access controls. An authenticated attacker with low privileges can exploit this to view restricted data elements across tenant boundaries , indicating a cross-tenant information disclosur...

EUVD-2026-82773

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848: Improper Access Control

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

nerva v1.69.6

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

PT-2026-88063

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creatio...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

PT-2026-85665

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

The vulnerability of the AuthLdap::create() method in the phpMyFAQ web application allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the AuthLdap::create method in the phpMyFAQ web application is related to security configuration errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...