Release Radar
Live feed of version updates across the open-source security arsenal. Track what's shipping in your favorite tools.
Tracked Tools on Page (6)
Latest Updates
2026-08-22 15:54 UTCThis update brings significant new content, including dedicated pages for new vulnerability classes, fresh exploitation techniques for existing topics, and numerous quality-of-life improvements across the knowledge base.
📚 New Vulnerability Pages
- External Variable Modification: Complete new section covering PHP
extract()function vulnerabilities, variable pollution, and security implications - Reverse Proxy Misconfigurations: Covering common Nginx misconfigurations.
🔄 Enhanced Sections
- Command Injection:
- Added worstfit technique for argument injection
- Enhanced with fullwidth character bypass methods
- CSV Injection:
- New Google Sheets exploitation section
- Added formulas like IMPORTXML, IMPORTRANGE for data exfiltration
- E...
Remove scapy usage (#500)
-
removed arp and dns hunters usage due to it's violations of the scapy GPL2 license
-
added installation of arp and dns hunters to Dockerfile
-
added explicit new version to plugins in dockerfile installation
-
ignore B020 flake8
Fix: Removed automatic import of handler object (#506)
- removed automatic import of handler object in events package and renamed handler.py to event_handler.py to solve name collision
- the last version of the rules before a general license switch to DRL 1.1 (Detection Rule License) https://github.com/SigmaHQ/sigma/blob/drl-1.1/LICENSE.Detection.Rules.md