40 matches found
foxguard
foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. root@kitploit:...
remic
remic Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies Usage root@kitploit: $ remic -h NAME: remic - A simple and fast tool for detecting vulnerabilities in application dependencies USAGE: remic options file VERSION: 0.0.2 OPTIONS: --format value,...
dep-scan
Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...
ore-mal-pkg-inspector
OreWatch Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner A production-grade security tool for detecting malicious packages and supply chain threats across npm, PyPI, Maven, RubyGems, Go, and Cargo ecosystems. Leverages automated threat intelligence collection from...
murphysec
中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...
retire.js
Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...
Dependency Scanning
Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...
Vulfy
🐺 Vulfy Fast, cross-language vulnerability scanner that doesn't mess around. 🚀 What is Vulfy? Vulfy is a lightning-fast vulnerability scanner that checks your project dependencies for known security issues across 9 programming languages. Built with Rust for maximum performance, it integrates with...
Snyk Scan
Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: root@kitploit: - pipe: snyk/snyk-scan:1.0.2 variables:...
scanner-for-CVE-2025-55182-vulnerability
🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...
CVE-2026-87052
A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...
vet v1.19.0
Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...
MINI-2493-G63V-4885
Bulletin has no description...
GO-2025-4098 vulnerabilities
Vulnerabilities for packages: rke2-runtime, blob-csi, eks-distro, skaffold, mesosphere-vsphere-csi, kaniko-fips, xeol, datadog-agent-fips, trivy-operator-fips, containerd, dagger, google-osconfig-agent, trivy, spegel-fips, buildah, k8s-device-plugin-fips, nvidia-container-toolkit,...
GO-2026-4602 vulnerabilities
Vulnerabilities for packages: kube-mgmt, gomplate, aws-sigv4-proxy-fips, external-dns, pulumi, dex, cluster-api-aws-controller, dockerize-fips, cilium-certgen, loki-fips, net-kourier-fips, cinder-csi-plugin-fips, fleet-server, karpenter, kubernetes-dashboard-fips, tofu-controller,...
GO-2026-4982 vulnerabilities
Vulnerabilities for packages: gomplate, crossplane-provider-aws-autoscaling, cert-manager-istio-csr-fips, external-dns, dex, go-openssl, certificate-transparency, perses-fips, loki-fips, net-kourier-fips, cinder-csi-plugin-fips, fleet-server, karpenter, kubernetes-dashboard-fips,...
GO-2026-4977 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-autoscaling, external-dns, go-openssl, cilium-certgen, loki-fips, net-kourier-fips, karpenter, porch-fips, kyverno-policy-reporter-plugins-kyverno-fips, nats-fips, nvidia-nsight-compute-13.2, datadog-agent-fips, containerd, atlantis-fips, keda...
GO-2025-4155 vulnerabilities
Vulnerabilities for packages: gomplate, cert-manager-istio-csr-fips, aws-sigv4-proxy-fips, external-dns, cluster-api-aws-controller, dockerize-fips, cilium-certgen, dgraph, net-kourier-fips, cinder-csi-plugin-fips, fleet-server, karpenter, amazon-cloudwatch-agent-fips, tofu-controller,...
GO-2025-3488 vulnerabilities
Vulnerabilities for packages: gomplate, pulumi, dex, cluster-api-aws-controller, certificate-transparency, loki-fips, net-kourier-fips, cinder-csi-plugin-fips, karpenter, kubernetes-dashboard-fips, amazon-cloudwatch-agent-fips, dagdotdev, prometheus-pushgateway-fips,...
