terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

terrier

Terrier Terrier est un outil d'analyse d'images et de conteneurs qui peut être utilisé pour scanner des images OCI et des conteneurs afin d'identifier et de vérifier la présence de fichiers spécifiques en fonction de leurs empreintes. Une description détaillée de Terrier est disponible sur le blo...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: trivy-operator, cerbos, cert-manager-cmctl, consul-k8s, consul-k8s-fips, pluto, chart-testing, zot, trivy-fips, helm-push, kots, headlamp, flux-source-controller, flux-helm-controller-fips, cerbos-fips, helm-operator, rancher-fleet-fips, zarf, helm-mapkubeapis, harbo...

GO-2024-2958 vulnerabilities

Vulnerabilities for packages: zot, harbor-scanner-trivy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: linkerd2, argocd-image-updater, falcoctl, steampipe, kube-arangodb, consul-k8s, helm-push, argo-cd, maru, trivy-operator, cilium-cli, teleport, gogatekeeper, zarf, cert-manager-cmctl, rancher-fleet, k8ssandra-client, k9s, kargo, chartmuseum, kots, gatekeeper,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: grafana-alloy, flux-source-controller, falcoctl, cosign, opentelemetry-collector-contrib, ko, flux-image-reflector-controller, promxy, aactl, argo-workflows, doppler-kubernetes-operator, docker, kubernetes-dashboard-auth, zot, boring-registry, scorecard, azcopy,...

osv-scanner v2.5.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

CVE-2026-70440

The Jenkins Qualys Container Scanning Connector Plugin (version 1.8.0.5 and earlier ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape user-controlled field values within a JavaScript context . Attackers possessing Item/Configure permissi...

CVE-2026-70440

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2026-70440

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2026-68275

Name of the Vulnerable Software and Affected Versions Jenkins Qualys Container Scanning Connector Plugin versions prior to 1.8.0.6 Description Stored cross-site scripting XSS occurs because user-controlled field values are not properly escaped within a JavaScript context. This issue can be...

CVE-2026-70440: Improper Neutralization of Input During Web Page Generation

Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

dep-scan v6.3.0

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

Exploit for Out-of-bounds Write in Netapp Bootstrap_Os

Typeform DevSecOps Pipeline POC !Pythonhttps://img.shields...

EUVD-2019-6558

Malware in sbrugna...

discover

This is a collection of custom bash scripts used to automate various penetration testing tasks, including reconnaissance, scanning, enumeration, and malicious payload creation using Metasploit. The scripts are designed to be used with Kali Linux. The scripts are organized into several categories,...

Elevating Security: Qualys Unveils First Solution for Scanning AWS Bottlerocket in Amazon EKS and Amazon ECS

With this new offering, Qualys establishes itself as the first and only vendor solution with the unique ability to scan AWS Bottlerocket instances directly using the Qualys Cloud Agent and TotalCloud Agent-less Snapshot-Based Scan. This innovative capability empowers organizations to...

CVE-2023-4777

An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credentials IDs of credentials stored in Jenkins and to connect to an...