juumla

🦁 Juumla 🦁 Juumla Juumla는 Joomla 버전을 식별하고, 취약점 및 민감 파일을 스캔하기 위해 만들어진 Python 도구입니다. ⚡ 설치 / 시작하기 Juumla를 설치하고 사용하는 방법에 대한 빠른 가이드입니다. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2. Install the libraries - pip3 install -r requirements.txt 3. Run Juumla - python3 main.py -...

ansible-role-log4shell

Ansible 역할 - log4shell ⭐ GitHub에서 별표를 눌러주세요 — 큰 동기부여가 됩니다! 시스템에서 Log4Shell CVE-2021-44228을 찾습니다 이 역할은 파일 시스템과 열린 파일lsof에서 JAR 및 WAR을 찾으려고 합니다. ⚠️ /에서 find를 실행하고 JAR/WAR 내부를 검색하기 위해 압축 해제 과정을 수행하므로 스캔 중 시스템 속도가 느려질 수 있습니다. 이 역할은 다음과 같은 딕셔너리로 log4shellanalyzeversions 변수를 채웁니다: "/tmp/rundeck.war":...

inspec-log4j

inspec-log4j 이 프로필은 파일 시스템에 직접 있는 Log4j Core JAR 파일과 WAR 파일에 포함된 Log4j Core JAR 파일을 스캔하여 취약한 버전을 탐지합니다. 로컬에서 프로필 실행 git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j 원격 SSH 대상에 대해 프로필 실행 대상에서 권한 있는 사용자예: root의 SSH 키가 로드되어 있는지 확인하십시오. 또는 CLI 문서를 확인하여 Inspec을 SUDO와 함께...

log4j-scanner

Log4j Scanner 파일 및 디렉터리에서 Log4Shell 취약점 CVE-2021-44832을 발견하세요. Description 이 Rust 기반 Log4j Scanner는 Log4Shell 취약점 CVE-2021-44832이 포함될 수 있는 취약한 파일을 식별하고 찾도록 설계되었습니다. 파일과 디렉터리를 스캔하여 이름에 "log4j"가 포함된 Logger.class 파일이나 이름에 "2.17.1"이 포함되지 않은 JAR 파일을 찾습니다. Features 파일 및 디렉터리에서 Log4j 취약점을 스캔합니다. 이름에...

CVE-2026-49988 Repomix: attach_packed_output can bypass file-read secret scanning for supported local files

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attachpackedoutput and readrepomixoutput flow can register and read arbitrary local .json, .txt, .md, or .xml files without the filesystemreadfile runSecretLint safety check or Repomix...

MAL-2026-6721 Malicious code in ts-eslint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bbed232e0268a791ce846260ce170342eec359bf1a7e84b9514767d77803a1 The package's index.js defines run/fromstr that recursively walk process.cwd and match files named.env, env, id.json, config.json, config.toml,...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356

Terrascan v1.18.3 and earlier are affected by an SSRF in the server mode feature. An unauthenticated attacker can supply an arbitrary URL via the webhook_url multipart form parameter in POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan, causing Terrascan to POST the full scan results to the att...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

EUVD-2026-30952

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

CVE-2026-47356: Server-Side Request Forgery (SSRF)

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via the webhookurl parameter in the file scan endpoint POST /v1/iac/iacVersion/cloud/local/file/scan when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhookurl multipa...

PT-2026-41952

Name of the Vulnerable Software and Affected Versions Terrascan versions prior to 1.18.3 Description When running in server mode, the software is susceptible to Server-Side Request Forgery SSRF, a flaw where an attacker can force the server to make requests to an unintended location. An...

Malicious code in forge-jsx (npm)

forge-jsx is a malicious npm package that impersonates an Autodesk Forge SDK. It was published as a fully-formed RAT from its first version on April 7, 2026. Installing the package on any non-CI machine deploys a persistent background agent that captures all keystrokes, monitors clipboard content...

`microsoftsystem64` was removed from crates.io for malicious code

microsoftsystem64 installs a hardcoded SSH authorizedkeys entry persistence/backdoor and scans for sensitive files .env, credential-like JSON names, keyword-matching docs, reads their contents, base64-encodes where needed, and exfiltrates everything to a remote server via HTTP. It also packages a...

RUSTSEC-2026-0102 `microsoftsystem64` was removed from crates.io for malicious code

microsoftsystem64 installs a hardcoded SSH authorizedkeys entry persistence/backdoor and scans for sensitive files .env, credential-like JSON names, keyword-matching docs, reads their contents, base64-encodes where needed, and exfiltrates everything to a remote server via HTTP. It also packages a...

CVE-2026-27967

Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools readfile, editfile. It allows reading and writing files outside the project directory when a project contains symbolic links pointing to external paths. This bypasses the intended workspace...