CVE-2026-12436 Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

CVE-2026-12436: Improperly Controlled Modification of Dynamically-Determined Object Attributes

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

Drone CI Login Panel - Detect

Drone CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Drone CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Drone CI Login Panel - Detect', 'description': 'Drone...

Travis CI Disclosure Detection

Travis CI is a Software as a Service SaaS based continuous integration service used to build and test software projects. By defining a configuration file named .travis.yml in their source code repositories, developers can customize their applications build workflows. !/usr/bin/env python3 --...

Woodpecker CI Panel - Detect

Woodpecker CI panel was detected. Woodpecker is a community fork of Drone CI, providing a simple yet powerful continuous integration platform. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker CI panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import...

Woodpecker - Detect

Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility.""" from kittysploit import from lib.protocols.http.httpclient import...

Bamboo - Detection

Detect the presence of Bamboo, a CI/CD tool. !/usr/bin/env python3 -- coding: utf-8 -- """Detect the presence of Bamboo, a CI/CD tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bamboo - Detection', 'description...

Concourse CI Login Panel - Detect

Concourse CI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Concourse CI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Concourse CI Login Panel - Detect',...

GitLab CI YAML - Exposure Detection

The gitlab-ci.yml file, used for configuring CI/CD pipelines in GitLab, has been found exposed. This file contains crucial details about the build, test, and deployment processes, and may include sensitive information such as API keys, tokens, environment variables, and other credentials...

safe-chain v1.5.13

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

Fedora 43 : opkssh (2026-168280f3c4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-168280f3c4 advisory. Update to 0.16.0. This release includes a security fix for GQ-commitment PK Tokens upgrades the openpubkey dependency to v0.25.0, addressing a vulnerability...

Malicious Package

Overview delivery-ci-sage is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview delivery-ci-upgrade-from is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

cicd-sensor rules/v20260722-001

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

GHSA-XG2H-5XR2-29JW Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator

Code Generation Literal Injection in Kiota Ruby Generator Leads to Arbitrary Code Execution Impact The Kiota Ruby code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI default fields and property names directly into Ruby...

PT-2026-67596

Preface Poweradmin maps OIDC identities into local users through oidc user links.oidc subject plus provider id. In the MySQL schema, the OIDC link table explicitly uses utf8mb4 unicode ci, which is case-insensitive and accent-insensitive. OIDC sub is a stable external subject identifier and shoul...

CVE-2026-44359

The CVE describes a flaw in Meshtastic’s GitHub workflow (main_matrix.yml) prior to version 2.7.21.1370b23 where pull_request_target could trigger jobs that check out attacker forks and execute attacker-controlled files with repository secrets and elevated GITHUB_TOKEN permissions. External PRs w...

CVE-2026-44359 Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...

CVE-2026-44359 Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...

CVE-2026-44359 Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's mainmatrix.yml workflow is triggered by pullrequesttarget and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated...