cicd-sensor

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

CICD-Goat-Vapt-Writeup

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...

CVE-2026-112407

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in th...

CVE-2026-112407

AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 are affected by an incorrect privilege assignment within the IAM policy. This flaw allows remote authenticated users with push access to the application source repository to escalate privileges. Attackers can leverage ap...

CVE-2026-112407 Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in th...

PT-2026-118648

Name of the Vulnerable Software and Affected Versions AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 Description Incorrect privilege assignment in the IAM policy allows remote authenticated users with push access to the application source repository to escalate...

cicd-sensor

Este repositorio no tiene un README...

aegis-stack (>=0.8.0, <=0.15.1), aegis-stack-crawl4ai (0.1.0) +10 more potentially affected by CVE-2026-53951 via copier (>=9.6.0, <=9.14.3)

copier PYPI version =9.6.0, =0.8.0, =2.7.0, =1.6.0b0, =0.1.58, =4.12.2rc1, =4.12.2rc1, =5.0.0b2, =4.12.2rc1, =4.12.2rc1, =2.9.1, =2.51.0 Source cves: CVE-2026-53951 Source advisory: OSV:PYSEC-2026-3818...

CICD-Goat-Vapt-Writeup — Updated!

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...

aegis-stack (>=0.8.0, <=0.15.1), aegis-stack-crawl4ai (0.1.0) +10 more potentially affected by CVE-2026-53951 via copier (>=9.6.0, <=9.14.3)

copier PYPI version =9.6.0, =0.8.0, =2.7.0, =1.6.0b0, =0.1.58, =4.12.2rc1, =4.12.2rc1, =5.0.0b2, =4.12.2rc1, =4.12.2rc1, =2.9.1, =2.51.0 Source cves: CVE-2026-53951 Source advisory: OSV:GHSA-9GMC-JQMH-3RVM...

Malicious code in @servicetitan/anvil-icon (npm)

npm/@servicetitan/anvil-icon is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

aegis-stack (>=0.8.0, <=0.15.1), aegis-stack-crawl4ai (0.1.0) +10 more potentially affected by CVE-2026-62999 via copier (>=9.6.0, <=9.15.2)

copier PYPI version =9.6.0, =0.8.0, =2.7.0, =1.6.0b0, =0.1.58, =4.12.2rc1, =4.12.2rc1, =5.0.0b2, =4.12.2rc1, =4.12.2rc1, =2.9.1, =2.51.0 Source cves: CVE-2026-62999 Source advisory: MEND:CVE-2026-62999...

Ansible Semaphore Panel Detect

An Ansible Semaphore login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ansible Semaphore login panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ansible Semaphore...

Zuul Panel - Detect

ZUUL panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZUUL panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Zuul Panel - Detect', 'description': 'ZUUL panel was detected.', 'author'...

Rollup.js Configuration - Detect

Rollup configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Rollup configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rollup.js Configuration - Detect', 'description':...

Pipeline Configuration Exposure Detection

Detects Pipeline Configuration Exposure. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Pipeline Configuration Exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Pipeline Configuration Exposure Detection...

Strider CD Panel - Detect

Strider CD panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strider CD panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strider CD Panel - Detect', 'description': 'Strider CD panel...

cicd-sensor rules/v20260722-001

🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...

Malicious code in intel-cicd-repo-infrastructure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 26e9f9760ea5108609a4a105c621c9ed1ac03930e70fe4cfe400f7c256a7641a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...