211321 matches found
polaris
Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...
redthread
RedThread Find the exploit. Judge it. Draft the fix. Prove what changed. RedThread is a CLI-first framework for testing LLM systems, validating failures, and turning confirmed vulnerabilities into evidence-backed defense candidates. It is built for teams who need more than a one-off jailbreak dem...
CVE-2026-71569
A flaw was found in Apache Camel's A2A component. Due to inconsistent network address validation, a remote attacker can supply a webhook URL that bypasses internal address restrictions. This issue leads to Server-Side Request Forgery SSRF, where the application can be induced to send unauthorized...
CVE-2026-103582
A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...
CVE-2026-118255
A flaw was found in Highcharts Grid. The component fails to validate URL schemes in credit links, allowing an attacker who controls the grid configuration to inject a malicious JavaScript link. When a user clicks the link, arbitrary script executes within the origin of the hosting web application...
CVE-2026-117549
A flaw was found in @fastify/secure-session. When configured to use signed cookies, the component fails to reject cookies that fail signature validation, proceeding to decrypt and accept the session payload. A remote user holding an unexpired session cookie can exploit this issue to bypass sessio...
CVE-2026-112112
A flaw was found in BIRD. An established Border Gateway Protocol BGP peer can bypass route validation by injecting crafted IPv6 Flow Specification FlowSpec rules containing destination prefixes with non-zero offsets. Because BIRD improperly validates these reconstructed prefixes against authorize...
CVE-2026-120060
A flaw was found in psqlODBC. The driver improperly validates lengths and counts received from the database server across multiple data handling operations. A malicious or compromised server can exploit this vulnerability by returning crafted responses to a connecting client. Successful...
CVE-2026-119285
A flaw was found in Fiber. When configured with wildcard subdomains and credentials enabled, the Cross-Origin Resource Sharing CORS middleware improperly validates domain origins by checking only the host suffix without enforcing a proper domain boundary. A remote attacker can exploit this issue ...
spring4shell-scan
spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...
caido
Website โข Dashboard โข Docs โข Roadmap โข Branding โข Discord ๐ Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...
audit_couchdb
Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...
Valid8Proxy
If you find this GitHub repo useful, please consider giving it a star! โญ๏ธ .png Valid8Proxy is a fast and efficient tool designed for fetching, validating, and storing working proxies HTTP, HTTPS, SOCKS4, SOCKS5, and Mixed. Perfect for web scraping, OSINT, automation, or network testing. ๐ Run...
redai
RedAI A terminal workbench for AI-driven vulnerability discovery and live validation. Most "AI security" tools stop at flagging code that looks vulnerable. RedAI goes further: after scanner agents produce candidate findings, validator agents work inside a live environment โ a running instance of...
CVE-2024-3400
CVE-2024-3400: OS Command Injection Vulnerability Description: CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject...
threat-modeling-mcp-server
Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with guided code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threat...
cloudtoolkit
CloudToolKit English | ็ฎไฝไธญๆ Multi-cloud defensive validation toolkit for CSPM / CNAPP detection, telemetry, and investigation workflows in authorized environments. CloudToolKit gives security teams a practical way to verify whether cloud controls are discoverable, detectable, alertable, and...
macnoise
MacNoise MacNoise generates real macOS activity for EDR validation and detection engineering. Run individual modules or YAML scenarios to exercise network connections, file writes, process execution, persistence, TCC access, and other behaviors against your security controls. For background on th...
Payload-and-Polyglot-Lists
Payload & Polyglot Lists Found a payload that doesn't work? Please open an issue with the payload, target context, and what you expected to happen. Pull requests with fixes or new payloads are always welcome. Research is ongoing. This project is under active development and will be updated with n...
