log4j-cve-code-search-resources

Uso della ricerca del codice per aiutare a correggere/mitigare log4j CVE-2021-44228 e log4j CVE-2021-45046...

log4jhound

log4jhound Script Bash che rileva le occorrenze di Log4j nei tuoi progetti e sistemi: decomprime i JAR e analizza i loro file Manifest, ricerca testuale nel codice sorgente. Utilizzo: ./log4jhound.sh directoryprincipale...

git-hound

🐾 GitHound Um apanhador de segredos que combina padrões, ataca patches e captura em lote. Visão Geral O GitHound caça chaves de API, segredos e credenciais expostas no GitHub combinando GitHub dorks com correspondência de padrões, detecção contextual e análise do histórico de commits. Insira um...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

gf

gf Un wrapper attorno a grep per evitare di digitare pattern comuni. Cosa? Perché? Uso grep un sacco. Quando faccio audit di codebase, guardo l'output di meg, o più in generale quando ho a che fare con grandi quantità di dati. Spesso finisco per usare pattern piuttosto complessi come questo:...

CVE-2026-48703

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...

CVE-2026-48703

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...

EUVD-2026-39011

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...

CVE-2026-48703 Warp: Command Injection via Warp code search tool arguments

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...

CVE-2026-48703 Warp: Command Injection via Warp code search tool arguments

Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...

CVE-2026-48703

Summary: CVE-2026-48703 affects Warp’s Agent Code Search tools (Grep and FileGlob). From 0.2025.04.09.08.11.stable_00 through 0.2026.05.06.15.42.stable_01, these tools perform read/search actions but construct shell commands from agent-controlled inputs (search text, paths, glob patterns) and exe...

PT-2026-48373

Name of the Vulnerable Software and Affected Versions Warp versions 0.2025.04.09.08.11.stable 00 through 0.2026.05.06.15.42.stable 00 Description Warp contains a command execution policy bypass within its Agent code search tools. The Grep and FileGlob actions, which are authorized as read or sear...

Detecting Privilege Escalation in Polyglot Microservices Via Agentic Program Analysis

Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to...

EUVD-2017-6834

Malware in sbrugna...

EUVD-2022-52771

Malicious code in bioql PyPI...

EUVD-2021-30703

Malicious code in bioql PyPI...

MT4DP: Data Poisoning Attack Detection for DL-Based Code Search Models Via Metamorphic Testing

Recently, several studies have indicated that data poisoning attacks pose a severe security threat to deep learning-based DL-based code search models. Attackers inject carefully crafted malicious patterns into the training data, misleading the code search model to learn these patterns during...

USN-7563-1: .NET vulnerability

It was discovered that .NET did not properly validate search path in Microsoft.NETCore.App.Runtime. An attacker could possibly use this issue to execute arbitrary code...

CVE-2021-32787

Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin area can be accessed by regular users and all information and features are properly protected except for daily usage statistics and code intelligence uploads a...

The vulnerability of the Crucible code-checking tool, as well as the Fisheye tool for code search and comparison, relates to the disclosure of protected information, allowing attackers to expose such protected information.

The vulnerability of the Crucible code-checking tool and the Fisheye code-searching tool is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...