Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.6 security update

Red Hat Advanced Cluster Management for Kubernetes v2.15 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update

Red Hat Advanced Cluster Management for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update

Red Hat Advanced Cluster Management for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

learnjavabug

Questo progetto è destinato esclusivamente alla ricerca sulla sicurezza; è vietato utilizzarlo per lanciare attacchi illegali. Le conseguenze derivanti dall'uso sono a carico dell'utente. Questo è un progetto personale per riprodurre e divulgare alcune vulnerabilità interessanti o di impatto...

hashview

Hashview v0.8.2 Hashview è uno strumento per professionisti della sicurezza volto a organizzare e automatizzare i compiti ripetitivi legati al cracking delle password. È suddiviso in due componenti: il server Hashview e l'agente Hashview. Il server Hashview è un'applicazione web che gestisce uno ...

CVE-2026-39983

Riferimenti https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...

EUVD-2026-66677

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Sprin...

CVE-2026-47842

Spring Security 's AesBytesEncryptor deterministically encrypts data with AES/CBC when the two-argument constructor is used or a null IV generator is passed with CBC mode, resulting in a null (all-zero) initialization vector . This causes identical plaintexts to always produce identical ciphertex...

CVE-2026-47842 Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Sprin...

claude-code-devcontainer

Claude Code in un devcontainer Un ambiente di sviluppo sandbox per eseguire Claude Code con bypassPermissions abilitato in sicurezza. Realizzato presso Trail of Bits per flussi di lavoro di audit di sicurezza. Perché usarlo? Eseguire Claude con bypassPermissions sulla tua macchina host è rischios...

CVE-2026-39371

Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2026-39371 https://github.com/redwoodjs/sdk/security/advisories/GHSA-x8rx-789c-2pxq...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

CVE-2026-47841

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

sentrymcp

sentrymcp Um scanner de segurança estático + runtime para servidores MCP Model Context Protocol. Entre janeiro e abril de 2026, pesquisadores de segurança divulgaram mais de 40 CVEs em implementações de servidores MCP, e uma varredura de 2026 da Endor Labs em servidores MCP públicos encontrou 82%...

zizmor

🌈 zizmor zizmor è uno strumento di analisi statica per sistemi CI/CD. Può trovare e correggere problemi di sicurezza nelle configurazioni CI/CD più comuni, inclusi GitHub Actions, Dependabot e pre-commit. Alcune delle cose che zizmor individua:...

CVE-2026-47841 WebAuthn User Verification Bypass via Session Serialization

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

EUVD-2026-66639

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47841

Spring Security 's WebAuthn support is vulnerable to a user verification bypass when the application uses a distributed HTTP session store . The root cause is tied to session serialization , which can allow an attacker to bypass the user verification step of a WebAuthn authenticator. Affected ver...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...