Go-SCP

You can download this book in the following formats: PDF, Mobi and ePub. Introduction Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development. It was originally created by Checkmarx Securit...

kics

!checkmarxhttps://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAA7EAAAOxAGVKw4bAAADbklEQVRYhc2XTWidRRSGn3MJl1AkZFFcFCkFIYKC...

Checkmarx-CVE-2025-30066-Detection-Tool

Checkmarx-CVE-2025-30066-Detection-Tool These are tools for scanning your GitHub workflows and logs for potential malicious actions associated with CVE-2025-30066. It checks for a set of known risky GitHub Actions and a suspicious code snippet embedded in workflow files. As well for secrets that...

teampcp-supply-chain-attack

TeamPCP Supply Chain Attack: Technical Analysis & Detection Guide CVE-2026-33634 CVSS 9.4 — The most impactful CI/CD supply chain attack of 2026 so far. Between March 19–25, 2026, threat actor TeamPCP also tracked as DeadCatx3, PCPcat, ShellForce, CanisterWorm executed a cascading supply chain...

EUVD-2026-108271

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

PT-2026-121492

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

Checkmarx ast-cli encryption issue vulnerability

Checkmarx ast-cli versions 2.3.59 and earlier contain an encryption vulnerability. This vulnerability arises because archives downloaded from download.Checkmarx.com are not verified for checksums prior to decompression and execution. Attackers can replace these archives with arbitrary binaries,...

Checkmarx ast-cli path traversal vulnerability

Versions of Checkmarx ast-cli prior to 2.3.51 contain a path traversal vulnerability. This vulnerability stems from insufficient validation of archive entries’ paths within the tar decompression logic; it may allow malicious tar archives containing absolute paths or path traversal entries to writ...

com.checkmarx.jenkins:checkmarx (>=8.90.1, <=8.90.4), com.checkmarx:cx-client-common (>=8.90.3, <=8.90.5) +14 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (3.0.0)

com.github.junrar:junrar MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.checkmarx.jenkins:checkmarx =8.90.1, =8.90.3, =2.1.3, =3.1.0, =2.1.3, =2.1.3, =3.1.0, =2.1.5, =2.1.10,...

com.checkmarx.maven:checkmarx-maven-plugin (9.00.3), com.checkmarx:cx-client-common (>=2021.1.135, <=2023.1.7) +19 more potentially affected by CVE-2026-97370 via com.github.junrar:junrar (1.0.1)

com.github.junrar:junrar MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.checkmarx.maven:checkmarx-maven-plugin 9.00.3 - com.checkmarx:cx-client-common =2021.1.135, =20.0.10,...

zaproxy w2026-09-03

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks

The Australian Federal Police AFP has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP , the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM. Louis...

zaproxy w2026-08-19

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

zaproxy w2026-08-06

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

kics v2.1.21

!checkmarxhttps://img.shields.io/endpoint?url=https://pgp36n22ol.execute-api.eu-west-1.amazonaws.com/dev/cxflowcache-results%3Fstyle=plastic&logoWidth=20&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAA7EAAAOxAGVKw4bAAADbklEQVRYhc2XTWidRRSGn3MJl1AkZFFcFCkFIYKC...

zaproxy w2026-07-28

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

Checkmarx CxSAST Login Panel - Detect

Checkmarx CxSAST login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Checkmarx CxSAST login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Checkmarx CxSAST Login Panel - Detect...

Malicious code in checkmarx-claude-cache (npm)

Source: amazon-inspector 26a16e61d88e467ada75205ee93a9339cdf2fb65f3ded068282b4d83b6cb05e9 When the CLI runs the documented npx checkmarx-claude-cache invocation pattern, bin/cli.js performs an HTTPS GET to a hardcoded URL on a lookalike host —...

zaproxy w2026-07-21

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

zaproxy vw2026-07-14

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...