ultralytics

中文 | 한국어 | 日本語 | Русский | Deutsch | Français | Español | Português | Türkçe | Tiếng Việt | العربية Ultralytics создаёт передовые, самые современные SOTA модели YOLO, основанные на многолетних фундаментальных исследованиях в области компьютер...

metasploit_in_termux

Metasploit Framework 6 dans Termux Comment installer Avant Pour avoir Termux à jour : Effacez toutes les données de Termux dans les paramètres Android Désinstallez et réinstallez la dernière version de Termux depuis F-Droid la version du Play Store est obsolète Lancez ensuite Termux pour...

trivy-action

Action Trivy Action GitHub pour Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Table des matières Utilisation Analyse du pipeline CI Analyse du pipeline CI avec config Trivy Cache Configuration de Trivy Analyse d'une archive tar...

ScubaGear

!GitHub Releasegithub-release-imgrelease !PSGallery Releasepsgallery-release-imgpsgallery !CI Pipelineci-pipeline-imgci-pipeline !Functional Testsfunctional-test-imgfunctional-test !GitHub Licensegithub-license-imglicense !GitHub Downloadsgithub-downloads-imgrelease !PSGallery...

warhorse

Warhorse Table des matières Aperçu Fonctionnalités Documentation Développement Remerciements Aperçu Warhorse est un playbook Ansible complet permettant de déployer une infrastructure dans le cloud pour réaliser des évaluations de sécurité. Le playbook combine Terraform et Ansible pour déployer et...

keyguard

keyguard Analysez les bases de code, les projets GCP et les pipelines CI pour détecter les identifiants Google API exposés — avant qu'ils ne soient exploités. Le problème : Google a activé rétroactivement l'accès à l'API Gemini sur des clés API existantes Maps, Places, etc. conçues pour être...

GitLeaks

Image conteneur GitLeaks Build gitleaks opinionné pour la détection de secrets dans les workflows locaux et les pipelines. Fonctionnalités Construit gitleaks à partir de la source amont taguée avec des chaînes Go épinglées pour des binaires reproductibles. Composant GitLab CI chez...

CVE-2026-58424

CVE-2026-58424 - Gitea: обход шлюза утверждения рабочих процессов PR из форков Серьёзность: Высокая CVSS 8.9 Затронутые версии: Gitea ≤ 1.26.2 Исправлено в: Gitea 1.26.3 Рекомендация: GHSA-777r-4v59-6486 Описание уязвимости Gitea Actions применяет шлюз утверждения к запускам рабочих процессов,...

CVE-2026-87050

A flaw was found in operator-foundry. GitHub Actions and reusable workflows within the component are referenced using mutable tags e.g., @v0, @v4 instead of fixed commit SHAs. This allows an attacker to potentially alter the code executed in the Continuous Integration CI pipeline through an...

EUVD-2026-66428

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

Malicious code in gpt-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...

PT-2026-48663

Recently received CVE-2026-11892 for a vulnerability which led to the complete compromise of Mozilla's CI pipeline which could have allowed me to compromise Firefox builds. GHSA situated here - https://t.co/oVBm0DaCVk...

MAL-2026-4686 Malicious code in tempo-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795bf7080d27cef141114dd46b5734c136f762933a43f2d1308e82547c5f99a6 [email protected] ships a preinstall hook poc.js that unconditionally collects host identity os.hostname, whoami, id, network configuration...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

CVE-2026-40288

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...