OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester foi criado para testar automaticamente APIs em busca de vulnerabilidades comuns, após gerar testes a partir do arquivo de especificação openapi. Ele fornece a funcionalidade de fuzzear automaticamente entradas e usar entradas fornecidas pelo usuário...

restler-fuzzer

RESTler Cos'è RESTler? RESTler è il primo strumento di fuzzing per API REST stateful per testare automaticamente i servizi cloud attraverso le loro API REST e trovare bug di sicurezza e affidabilità in questi servizi. Per un dato servizio cloud con una specifica OpenAPI precedentemente Swagger,...

vex-repo-spec

Specifica del Repository VEX v0.1 Specifica del Repository VEX v0.1 1. Versionamento 2. Manifest del Repository 2.1 Panoramica 2.2 Posizione del File 2.3 Schema 2.4 Esempio 2.5 Descrizioni dei Campi e Note d'Uso Campi Principali Sotto-campi delle Versioni Sotto-campi delle Posizioni 3. Struttura...

CVE-2021-42694

CVE-2021-42694 Generieren Sie bösartige Dateien unter Verwendung der kürzlich veröffentlichten Homoglyph-Angriff-Schwachstelle, die zumindest in C, C++, C, Go, Python, Rust, JS, ... entdeckt wurde. Zitat von cve.mitre.org Ein Problem wurde in den Zeichendefinitionen der Unicode-Spezifikation bis...

CVE-2021-42574

CVE-2021-42574 - Generatore di codice // Aggiornamento: 05.11.2021 Ora è possibile non solo codificare, ma anche decodificare i file. Ciò significa che ora i file contenenti caratteri bidi supportati possono essere convertiti in file template con segnaposto bidi LRO, .... Genera file dannosi...

restler-fuzzer

RESTler What is RESTler? RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI formerly Swagger specification, RESTler analyzes its...

hush

Especificação aberta e portátil para regras de segurança de agentes de IA Especificação · Documentação · Conjuntos de Regras · JSON Schema HushSpec é um formato de política aberto para regras de segurança de agentes de IA. Ele define o que um agente pode fazer em tempo de execução, incluindo aces...

api-security-audit-action

GitHub Action: 42Crunch REST API Static Security Testing L'azione REST API Static Security Testing individua i contratti API REST che seguono la specifica OpenAPI OAS, in precedenza nota come Swagger ed esegue controlli di sicurezza approfonditi su di essi. Sono supportate sia la OAS v2 che la...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390 Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...

CVE-2026-76390

Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3 expose the add-on's OpenAPI specification through Splunk Web static file paths without requiring authentication. The root cause is that the generated OpenAPI spec is packaged in a static file path that Splunk Web serves u...

PT-2026-78817

Name of the Vulnerable Software and Affected Versions Cisco Talos Intelligence for Enterprise Security Cloud versions prior to 1.0.3 Description An unauthenticated user can access the add-on OpenAPI specification via Splunk Web static file paths. This exposure occurs because the generated OpenAPI...

CVE-2026-72506

VoiceTra provided by National Institute of Information and Communications Technology NICT contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server or service controlled by an attacker, potentially resulting in the theft of input dat...

CVE-2026-72506

CVE-2026-72506 affects VoiceTra by the National Institute of Information and Communications Technology (NICT). The issue is an incorrectly specified destination in a communication channel, which may redirect users to a server or service controlled by an attacker. Consequences described include po...

CVE-2026-68400 firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's epmemoffset to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: Fix for iiochanspec for sensors without event detection. The stlsm6dsxaccchannels array within struct iiochanspec contains a eventspec field that is not NULL, indicating that the sensor supports IIO events...

JLSEC-2026-1138 Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer...

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

[SECURITY] Fedora 43 Update: pack-0.40.8-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

CVE-2026-65421 MZ Automation libiec61850 Out-of-bounds Read

The MMS BER decoder contains a flaw in decoding fixed-width BER fields boolean/integer: an attacker-supplied length value is not validated, causing a read past the end of a heap buffer. This leads to termination of the MMS service process and a denial-of-service condition...