agent-bom

Supported backends vary by capability. Capability matrix. Turn scattered infrastructure evidence into prioritized, correlated, and verifiable action Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Start with a local repository, image, SBOM, or MCP...

cyclonedx-cli

root@kitploit: / / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add...

CVE-2025-13780

CVE-2025-13780：pgAdmin 4 = 8.14 RCE 扫描器 针对 CVE-2025-13780 的全面漏洞扫描器，该漏洞是 pgAdmin 4 版本 ≤ 8.14 中的一个远程代码执行 RCE 漏洞。 🔍 漏洞详情 该漏洞存在于 pgAdmin 4 的 恢复 功能中。应用程序尝试使用正则表达式阻止危险 shell 命令（以 \ 开头）。但是，此检查可以被绕过。 易受攻击的正则表达式 ：^|\n \t\ 绕过方法 ： 1. UTF-8 BOM ：预置 \xef\xbb\xbf 可使正则表达式匹配失败 2. CRLF 注入 ：在反斜杠前使用 \n\r 而不是 \n 📦 安...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 元命令过滤器命令执行 摘要 pgAdmin 在修复 Issue 9320 时引入的 PLAIN 恢复元命令过滤器，在 SQL 文件以 UTF-8 字节顺序标记 EF BB BF 或其他特殊序列开头时无法检测到元命令。该实现的过滤器使用函数 hasmetacommands，该函数通过正则表达式扫描原始字节。该正则表达式未将这些字节视为可忽略，因此诸如 ! 的元命令仍未被检测到。当 pgAdmin 使用 --file 调用 psql 时，psql 会去除这些字节并执行命令。这可能导致在恢复操作过程中执行远程命令。 此绕过影响在提交...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: goreleaser, pulumi-kubernetes-operator, scorecard, gitness, nuclei, bom, src-fingerprint, gitsign, go-licenses...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: helm, ko, melange, apko, bom, ctop, up...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: helm, ko, melange, apko, bom, ctop, up...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: helm, ko, melange, apko, bom, ctop, up...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, aactl, bom...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: goreleaser, gitness, go-licenses, nuclei, src-fingerprint, pulumi-kubernetes-operator, gitsign, bom, scorecard...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: up, apko, ctop, melange, helm, ko, bom...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: up, apko, ctop, melange, helm, ko, bom...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: xeol, osv-scanner, flux-source-controller, guac, src-fingerprint, gitaly, gitlab-runner, kubescape, pulumi-kubernetes-operator, snyk-cli, gomplate, steampipe, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, trivy, zot, melang...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: src-fingerprint, pulumi-kubernetes-operator, gomplate, pulumi-language-yaml, gitness, apko, flux-kustomize-controller, zot, gitsign, go-licenses, pulumi-language-java, kots, bom, goreleaser, kubevela, pulumi-language-dotnet, pulumi, nuclei, scorecard...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: up, apko, ctop, melange, helm, ko, bom...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, kubernetes-dashboard, aactl, bom, argocd-image-updater...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: yace, local-static-provisioner, croc, crossplane-provider-sql, kubernetes-dashboard-metrics-scraper, nri-redis, secrets-store-csi-driver-provider-aws, manifest-tool, terraform-provider-pagerduty, gatekeeper, policy-controller, undock, gogatekeeper, steampipe, dex,...