santamon

Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release – expect bugs and API changes. What It Does...

pii-shield

PII-Shield 🛡️ Sidecar de saneamiento de logs sin código para Kubernetes. Previene fugas de datos GDPR/SOC2 redactando PII de los logs antes de que salgan del pod. PII-Shield se ejecuta en proceso — CLI, sidecar o WASM. No hay API alojada ni servidor al que se envíen tus datos. "No dejes que la PII...

tarian

Tarian Queremos mantener esto como código abierto para luchar contra los ataques a nuestro ecosistema favorito de Kubernetes. Podemos combatir amenazas juntos como comunidad, mediante contribución continua. Protege tus aplicaciones que se ejecutan en Kubernetes de ataques maliciosos mediante el...

MobSF_AI

MobSF AI Sidecar Este proyecto añade un asistente de chat impulsado por IA al Mobile Security Framework MobSF. Permite a los analistas de seguridad hacer preguntas sobre el informe de análisis generado por MobSF directamente desde la interfaz, aprovechando el modelo de OpenAI. Características...

alpr-dashboard-patches

Parches de tiempo de ejecución para ALPR Dashboard Dos parches de integración directa para el proyecto Docker algertc/alpr-dashboard. Ambos se pueden implementar sin modificar ni reconstruir la imagen original. Qué hay aquí logger-fix/ — registrador asíncrono + limitación de limpieza Reemplaza el...

CVE-2026-20253

Splunk Enterprise — Laboratorio de Entrenamiento CVE-2026-20253 Splunk Enterprise 10.2.3 · sidecar de recuperación PostgreSQL · CWE-306 Autenticación faltante para función crítica Una reproducción autorizada y autocontenida que modela el aviso real para educación defensiva. No incluye código...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...

CVE-2026-20253

🚨 CVE-2026-20253 - Vulnerabilidad Crítica de Creación de Archivos No Autenticada en Splunk Enterprise Vulnerabilidad de creación y truncamiento arbitrario de archivos no autenticada que afecta a Splunk Enterprise y Splunk Cloud Platform. 📖 Resumen Ejecutivo CVE-2026-20253 es una vulnerabilidad...

CVE-2026-20253

CVE-2026-20253 — Laboratorio de RCE sin autenticación previa en Splunk Enterprise Creación y truncado arbitrario de archivos sin autenticación a través del sidecar de PostgreSQL CVSS 9.8 · Crítico · CWE-306 · Explotado activamente CISA KEV ⚠️ Aviso legal Este repositorio está destinado...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform / MindsHub Cowork PoC for CVE-2026-73678 CVSS 3.1 10.0 Critical , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Full write-up: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ The Cowork...

CVE-2026-76262

CVE-2026-76262 affects Splunk Enterprise 10.4 versions below 10.4.2 . The Edge Processor SPL2 Preview sidecar exposes its Prometheus metrics endpoint without authentication, allowing any unauthenticated network client to retrieve runtime and build metadata for the sidecar. The vulnerability is li...

CVE-2026-76262 Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...

GO-2026-5046 vulnerabilities

Vulnerabilities for packages: bento, dapr, opentelemetry-collector-contrib, splunk-otel-collector...

CVE-2026-15467 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

CVE-2026-15467

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

EUVD-2026-55809

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

CVE-2026-15467 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

CVE-2026-15467

Trustyai-service-operator vulnerability CVE-2026-15467 affects the LMEvalJob controller. An authenticated cluster user can abuse a sidecar container to bypass environment-variable filtering and security policies, enabling remote code execution within the cluster. CVSS 3.1 base score 8.1 (HIGH) wi...

CVE-2026-15467

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...

PT-2026-69952

Name of the Vulnerable Software and Affected Versions trustyai-service-operator affected versions not specified Description A flaw in the LMEvalJob controller allows an authenticated user within the cluster to bypass security policies by configuring a sidecar container. This bypass enables the...