erebus

Veloce e personalizzabile scanner di vulnerabilità basato su parametri, basato su semplici regole YAML...

nuvola

nuvola nuvola con la n minuscola è uno strumento per eseguire dump e analisi di sicurezza automatiche e manuali su configurazioni e servizi di ambienti AWS utilizzando regole predefinite, estensibili e personalizzate create con una sintassi Yaml semplice. L'idea generale alla base di questo...

sigmalite

github.com/runreveal/sigmalite Il pacchetto sigmalite fornisce un parser e un motore di esecuzione per il Sigma detection format. root@kitploit: rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection ...

AutoPiff

AutoPiff إطار عمل ذكي للبحث عن التصحيحات وتحليلها محرك تحليل دلالي لاكتشاف إصلاحات الثغرات في تصحيحات برامج تشغيل Windows kernel. يستخدم AutoPiff قواعد YAML تحفظية لتحديد تغييرات الكود ذات الصلة بالأمان بدقة عالية وقابلية للتفسير. نظرة عامة يحلل AutoPiff الاختلافات بين إصدارات برامج التشغيل الثغر...

EUVD-2022-1367

Malicious code in bioql PyPI...

CVE-2021-30180

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

GHSA-7WFC-X4F7-GG2X Code injection in Apache Dubbo

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

GHSA-R577-4HQ7-73QH Remote Code Execution in Apache Dubbo

Apache Dubbo supports various rules to support configuration override or traffic routing called routing in Dubbo. These rules are loaded into the configuration center eg: Zookeeper, Nacos, ... and retrieved by the customers when making a request in order to find the right endpoint. When parsing...

Unspecified Vulnerability in Apache Dubbo

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A security vulnerability previousl...

CVE-2021-30180

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...