secureboot_objects

보안 부트 개체 이 저장소는 Microsoft가 권장하는 보안 부트 개체를 보관하는 데 사용됩니다. 문서는 Wiki를 방문하세요! 버전 관리 이 저장소는 의미론적 버전 관리 ..를 따릅니다. 이는 기본 변경 사항에 대한 의미를 전달하는 버전 관리 체계입니다. 버전 구성 요소 주요Major : 펌웨어 보안 부트 버전 간의 호환되지 않는 변경을 나타냅니다. 이는 펌웨어 또는 다른 구성 요소의 업데이트가 필요할 수 있는 중요한 변경입니다. 현재는 버전 1만 있습니다. 부Minor : 일반적으로 보안 사고의 결과로 추가적인 철회를...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation root@kitploit: git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

React2Shell-CVE-2025-55182-Detector

사전 요구 사항 package.json이 포함된 프로젝트 루트 디렉토리에 접근 가능 사용하는 스크립트에 따라 다음 런타임 중 하나 필요: Python Javascript PowerShell Bash jq 설치 필요 사용법 모든 스크립트는 package.json 파일이 있는 대상 프로젝트의 루트 디렉토리에서 실행해야 합니다. 1. Python 감지 안정적인 시맨틱 버전 비교를 위해 Python 스크립트 실행: root@kitploit: python3 scripts/python/checkreactversions.py 2...

CLSA-2026-1784769500 TuxCare security update for semver (8 CVEs)

TuxCare rebuilt semver to address 8 CVEs. Fixed in 5.1.0-tuxcare.1...

CLSA-2026-1779238050 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.4-tuxcare.1...

CLSA-2026-1775089654 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.2-tuxcare.1...

CLSA-2026-1775089629 TuxCare security update for semver (1 CVE)

TuxCare rebuilt semver to address 1 CVE. Fixed in 7.1.3-tuxcare.1...

CLSA-2026-1772496674 TuxCare security update for semver (2 CVEs)

TuxCare rebuilt semver to address 2 CVEs. Fixed in 6.3.0-tuxcare.1...

Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava. Vulnerabilities include allowing a malicious user to modify the prototype of "Object" via proto, causing the addition...

CVE-2022-27201

Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

EUVD-2023-0515

Malicious code in bioql PyPI...

CVE-2023-24429

Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

The vulnerability of the SemVer package manager NPM allows a hacker to trigger a service failure.

The vulnerability of the SemVer package manager NPM is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2022-25883

...

PT-2023-4569

Name of the Vulnerable Software and Affected Versions semver versions prior to 7.5.2 semver versions prior to 6.3.1 on the 6.x branch semver versions prior to 5.7.2 Description The issue is related to the use of a regular expression with inefficient computational complexity in the semver package,...

Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin

Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

GHSA-PCC2-W6M8-X5W4 Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin

Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

GHSA-H8P8-6378-649P XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...