254 matches found
CVE-2026-20253
Splunk Enterprise — CVE-2026-20253 Training Lab Splunk Enterprise 10.2.3 · PostgreSQL recovery sidecar · CWE-306 Missing Authentication for Critical Function An authorized, self-contained reproduction that models the real advisory for defensive education. It does not ship Splunk's proprietary cod...
CVE-2026-20253
🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...
CVE-2026-20253
CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...
pii-shield
PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...
santamon
Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release – expect bugs and API changes. What It Does...
tarian
Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...
CVE-2026-20253
CVE-2026-20253 Lab Environment Splunk Enterprise Pre-Auth RCE via PostgreSQL Sidecar Service | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 Critical Type| Unauthenticated Remote Code Execution CWE| CWE-306: Missing Authentication for Critical Function Product| Splunk Enterprise 10.0.x / 10.2.x DISCLAIME...
bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork
CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform / MindsHub Cowork PoC for CVE-2026-73678 CVSS 3.1 10.0 Critical , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Full write-up: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ The Cowork...
alpr-dashboard-patches
ALPR Dashboard runtime patches Two drop-in patches for the algertc/alpr-dashboard Docker project. Both are deployable without modifying or rebuilding the upstream image. What's here logger-fix/ — async logger + cleanup throttle Replaces the built-in sync log transport full-file read + rewrite on...
MobSF_AI
MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...
watchTowr-vs-Splunk-CVE-2026-20253
CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...
CLEANSTART-2026-XM81599 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Security vulnerability affects the k8s-sidecar package. cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
CLEANSTART-2026-QB58393 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Security vulnerability affects the k8s-sidecar package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...
CLEANSTART-2026-PW41000 Security fix for GHSA-6v7p-g79w-8964 applied in: k8s-sidecar 2.8.2-r1
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-JM52525 Security fix for CVE-2026-49264 applied in: k8s-sidecar 2.8.2-r1
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PZ20042 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Security vulnerability affects the k8s-sidecar package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...
CLEANSTART-2026-ZA90599 Security fix for CVE-2026-49265 applied in: k8s-sidecar 2.8.2-r1
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OX34995 urllib3 is an HTTP client library for Python
Security vulnerability affects the k8s-sidecar package. urllib3 is an HTTP client library for Python...