scan-shai-hulud

scan-shai-hulud 빠르고 제로 의존성의 Bash 스캐너로, 기기가 CVE-2026-45321 "Mini Shai-Hulud" 공급망 공격에 영향을 받았는지 탐지합니다. 2026년 5월 11일, TanStack, Mistral AI, UiPath, OpenSearch 및 Guardrails AI를 포함한 170개 이상의 npm 패키지 와 2개의 PyPI 패키지 가 동시에 감염되었습니다. 악성 페이로드는 AWS 자격 증명, GitHub 토큰, npm 토큰, Vault 비밀, SSH 키를 탈취하며, CI/CD 파이프라인을...

tanscript-exploit-check

미니 샤이-훌루드 공급망 공격 — IOC 점검기 curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash 또는 클론하여 로컬에서 실행: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd tanscript-exploit-check ./check-tanstack-exploit.sh 프로젝트디렉토리 ... 발생한...

CVE-2026-45321-Tanstack

공급망 공격 시뮬레이션 — CVE-2026-45321 TanStack npm 공급망 공격, CI/CD 악용, 설치 시 코드 실행 이해를 위한 교육용 랩 면책 조항 이 프로젝트는 오직 다음을 위해 만들어졌습니다: 사이버 보안 학습, 방어적 보안 연구, 로컬 랩 시뮬레이션, 공급망 공격 개념 이해. 이 프로젝트를 다음 용도로 사용하지 마십시오: 실제 시스템 공격, 자격 증명 탈취, 악성코드 배포, 무단 액세스, 또는 기타 불법 활동. 설명 이 랩은 다음 사고의 기본 개념을 시뮬레이션합니다: CVE-2026-45321 TanStac...

cicd-sensor

This repository does not have a README...

cicd-sensor

이 저장소에는 README가 없습니다...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: - pipe: snyk/snyk-scan:1.0.2 variables: SNYKTOKEN: ""...

CVE-2026-45321-Tanstack

Supply Chain Attack Simulation — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer This project is created only for: cybersecurity learning, defensive security research, local lab simulation, understanding t...

CVE-2024-31989

CVE-2024-31989 Argo CD용 CVE-Exploit 이 저장소는 Argo CD에서 비밀번호 없이 배포된 Redis 인스턴스를 대상으로 하는 CVE-2024-31989 익스플로잇을 포함합니다. 설명 Argo CD는 Kubernetes를 위한 선언적 GitOps 지속적 전달 도구입니다. 이 익스플로잇은 Redis 인스턴스가 비밀번호 없이 배포되는 Argo CD의 취약점을 활용합니다. 설치 1. 저장소를 클론합니다: git clone https://github.com/vt0x78/CVE-2024-31989.git cd...

gh-workflow-auditor

GitHub Workflow Auditor GitHubワークフローにおけるセキュリティ問題を特定するためのワークフロー監査ツール 使用方法 usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org Name or Repo name owner/repo. optional...

BIT-GITLAB-2026-79708 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have allowed an authenticated user with developer permissions to execute a policy test pipeline on projects within their grou...

BIT-GITLAB-2026-16794 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

BIT-GITLAB-2026-13210 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

PT-2026-98977

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

PT-2026-98978

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

PT-2026-98983

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have allowed an authenticated user with developer permissions to execute a policy test pipeline on projects within their grou...

EUVD-2026-85730

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

EUVD-2026-85736

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

CVE-2026-93577

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

CVE-2026-92470

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...