trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

shfz

shfz Uno strumento di fuzzing per applicazioni web basato su scenari che supporta la generazione di fuzz tramite algoritmo genetico. Caratteristiche Facile da personalizzare i test di fuzzing scrivendo scenari di fuzzing in JavaScript / TypeScript Pacchetti di terze parti possono essere usati neg...

cred_scanner

credscanner Un semplice strumento da riga di comando per trovare credenziali AWS nei file. Ottimizzato per l'uso con Jenkins e altri sistemi CI. Sospetto che esistano altri strumenti migliori come git-secrets, ma non ho trovato nulla per eseguire una scansione rapida e sporca che si integri bene...

sloppy-joe

Individua dipendenze allucinate, typosquatted e non canoniche prima che arrivino in produzione. cargo install sloppy-joe L'attacco alla supply chain diLiteLLM marzo 2026 ha compromesso un pacchetto con 97 milioni di download mensili. Gli attaccanti hanno rubato le credenziali di pubblicazione e...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite ist eine kontinuierliche Fuzzing-Lösung, die als Teil von Continuous Integration CI-Workflows läuft, um Schwachstellen schneller als je zuvor zu finden. Mit nur wenigen Codezeilen können GitHub-Nutzer ClusterFuzzLite in ihren Workflow integrieren und Pull-Requests...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

Elastic: Synthetics Recorder: Code injection when recording website with malicious content

A vulnerability was discovered in the Synthetics Recorder tool, which allows attackers to inject arbitrary code into a recording session. The waitForNavigation event calls quote within the context of a multi-line comment, which can be escaped with a specially crafted URL. This can lead to code...

Fedora 20 : csync2-1.34-15.fc20 / duplicity-0.6.25-3.fc20 / librsync-1.0.0-1.fc20 / etc (2015-3366)

Changes in librsync 1.0.0 2015-01-23 ====================================== - SECURITY: CVE-2014-8242: librsync previously used a truncated MD4 'strong' check sum to match blocks. However, MD4 is not cryptographically strong. It's possible that an attacker who can control the contents of one part...