ultralytics

中文 | 한국어 | 日本語 | Русский | Deutsch | Français | Español | Português | Türkçe | Tiếng Việt | العربية...

trivy-action

Trivy Action GitHub Action per Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Indice Utilizzo Scansione della pipeline CI Scansione della pipeline CI con configurazione Trivy Cache Configurazione di Trivy Scansione di un tarball Us...

metasploit_in_termux

Metasploit Framework 6 in Termux Come Installare Prima Per avere Termux aggiornato: Cancella tutti i dati di Termux nelle impostazioni Android Disinstalla e reinstalla l'ultima versione di Termux da F-Droid La versione sul Play Store è obsoleta Quindi avvia Termux per l'inizializzazione, chiudilo...

EUVD-2026-66428

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

warhorse

Warhorse Inhaltsverzeichnis Überblick Funktionen Dokumentation Entwicklung Danksagungen Überblick Warhorse besteht aus einem voll ausgestatteten Ansible-Playbook zur Bereitstellung von Infrastruktur in der Cloud für die Durchführung von Sicherheitsbewertungen. Das Playbook kombiniert Terraform un...

keyguard

keyguard Scansiona codebase, progetti GCP e pipeline CI per credenziali API di Google esposte — prima che vengano sfruttate. Il problema: Google ha abilitato retroattivamente l'accesso all'API Gemini su chiavi API esistenti Maps, Places, ecc. progettate per essere pubbliche e incorporate nel codi...

GitLeaks

Immagine Container di GitLeaks Build opinionato di gitleaks per la scansione di segreti in flussi di lavoro locali e pipeline. Caratteristiche Costruisce gitleaks dal sorgente upstream taggato con toolchain Go fissate per binari riproducibili. Componente GitLab CI su niclas-zone/ci/gitleaks...

CVE-2026-58424

CVE-2026-58424 – Gitea Fork-PR-Workflow-Genehmigungsgate-Umgehung Schweregrad: Hoch CVSS 8.9 Betroffen: Gitea ≤ 1.26.2 Behoben in: Gitea 1.26.3 Advisory: GHSA-777r-4v59-6486 Beschreibung der Schwachstelle Gitea Actions erzwingt ein Genehmigungsgate für Workflow-Ausführungen, die durch...

ScubaGear

...

Malicious code in gpt-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...

PT-2026-48663

Recently received CVE-2026-11892 for a vulnerability which led to the complete compromise of Mozilla's CI pipeline which could have allowed me to compromise Firefox builds. GHSA situated here - https://t.co/oVBm0DaCVk...

MAL-2026-4686 Malicious code in tempo-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795bf7080d27cef141114dd46b5734c136f762933a43f2d1308e82547c5f99a6 [email protected] ships a preinstall hook poc.js that unconditionally collects host identity os.hostname, whoami, id, network configuration...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

CVE-2026-40288

PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untrusted YAML files. When praisonai workflow run loads a YAML file with type: job, the...

CVE-2025-13436 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an authenticated user to cause a denial of service due to excessive resource consumption when handling certain CI-related inputs...