emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

MinimalReproducer

Dopo sforzi significativi, l'ho ridotto a un replicatore minimale. Questo è solo un progetto vuoto per dimostrare il problema con l'uso di dependency-check-maven che sono costretto a fare dalle regole della mia azienda. Controlla il pom.xml e verifica: mvn...

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool для Ubuntu Linux и Windows 10/11 Описание Этот инструмент обнаруживает потенциальную уязвимость React2Shell CVE-2025-55182 в проектах React, проверяя: Файл package.json и lock-файлы на наличие уязвимых пакетов Директорию nodemodules ...

heisenberg-ssc-gha

Heisenberg Dependency Health Check GitHub Action Un leggero guardrail per le PR per gli aggiornamenti delle dipendenze. Scansiona solo le dipendenze nuove o modificate dal tuo lock/manifest, recupera segnali di salute e rischio deps.dev + euristiche, segnala pubblicazioni fresche, commenta un...

boot-jackson-cve

Riproduzione di CVE-2020-36518 in Spring Boot 2.5.10 Esegui: root@kitploit: ./mvnw clean verify Fallirà con: root@kitploit: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with...

MINI-VJ4M-QX8Q-33HX

Bulletin has no description...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, grafana, docker-credential-gcr-fips, trivy-fips, skopeo-fips, chainloop-control-plane-fips, cloudbeat-fips, ko, trivy-operator-fips, beats-fips, upwind-agent, zot, buildah-fips, aws-otel-collector-fips, nrdot-collector-k8s, chainloop-control-plane,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: osv-scanner, aws-otel-collector, trivy, ko, rancher-machine, docker-credential-gcr, nuclei, skopeo, zot, datadog-agent, grafana, undock, buildah, spire-server, nerdctl, kots, k8sgpt, trivy-operator, envoy-gateway, rancher-agent, podman, portieris,...

EUVD-2022-4126

Malicious code in bioql PyPI...

EUVD-2022-2715

Malicious code in bioql PyPI...

Fedora: Security Advisory (FEDORA-2025-c263d3ebd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2021-43577

Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2018-12036

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames...

Malicious code in check-dependency-ver-consistency (npm)

--- -= Per source details. Do not edit below this line.=-...

ROS-2-1202

2.1202 Denial of Service in libX11CVE-2021-31535 1. Vulnerability Description: The vulnerability allows a local user to execute a denial of service DoS attack. The vulnerability exists due to insufficient validation of color names in the XLookupColor function. A local user can launch a specially...

Cross-site Scripting (XSS)

Jenkins OWASP Dependency-Check Plugin is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper vulnerability metadata sanitization from Dependency-Check reports. An attacker can inject malicious scripts that may be executed in the context of the user's browser session by...

Jenkins plugins Multiple Vulnerabilities (2024-03-06)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypa...

GHSA-9PP4-MX6X-XH36 Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...