lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

CVE-2026-120202

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

EUVD-2026-114723

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

PT-2026-134521

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect bundle siblings and walk bundle subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc...

CVE-2026-120202: highflame-ai ramparts: Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide…

Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collectbundlesiblings and walkbundlesubdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc und...

CVE-2026-85623

A flaw was found in goose. This vulnerability allows attackers to execute arbitrary commands by distributing malicious recipes that leverage insecure recipe standard input/output stdio extensions and retry checks. This bypasses the existing security scan, enabling the execution of shell commands...

EUVD-2026-71230

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85623

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

Fake Microsoft security scans trick victims into uninstalling their antivirus

A wave of websites is offering to check whether your antivirus is working. They call themselves SysScan , carry Microsoft branding, and all reach the same conclusion: Your computer has serious problems, and the cause is the antivirus software you installed. Windows, they claim, no longer supports...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno, bank-vaults, jitsucom-bulker, grafana-fips, k9s-fips, grafana, ratify-fips, tkn-fips, rancher-security-scan, pluto-fips, zitadel, mattermost-fips, beats, beats-fips, boring-registry-fips, istio-fips, docker-compose-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, helm-set-status, kube-arangodb, kyverno, maru, redpanda-operator, helm-mapkubeapis, tigera-operator, opentofu-fips, trivy-fips, vcluster, crossplane, kube-mgmt, kubescape-server-fips, cloudbeat-fips, falcoctl-fips, kots, cluster-api-helm-controlle...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: helm-fips, falcosidekick-fips, thanos-fips, terraform, cert-exporter-fips, volume-modifier-for-k8s, spire-server-fips, tekton-chains, kubernetes-csi-livenessprobe, tigera-operator, external-secrets-fips, opentelemetry-collector-contrib-fips,...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-qemu-melange, linux-gcp...

preflight v0.20.0

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...