trivy-java-db

trivy-java-db 概述 trivy-java-db 从 maven-index 仓库数据构建一个 SQLite 数据库，存储 jar 文件的 ArtifactID、GroupID、Version 和 sha1。 该数据库在 Trivy 中用于发现内部没有 GAV 信息的 jars 的相关信息。 更新间隔 每天 00:00 下载 java 索引数据库 你可以通过 Trivy 或 Oras CLI 下载实际编译好的数据库。 Trivy: root@kitploit: TRIVYTEMPDIR=$mktemp -d trivy --cache-dir $TRIVYTEMPDIR...

MAL-2025-10036 Malicious code in @zalastax/nolb-_gav (npm)

The package @zalastax/nolb-gav was found to contain malicious code...

Malicious code in @zalastax/nolb-_gav (npm)

The package @zalastax/nolb-gav was found to contain malicious code...

CVE-2024-8391

In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client. This is fixed in the 4.5.10 version. Note this does not affect the Vert.x gRPC server based grpc-java and Netty...

gav-net.com Cross Site Scripting vulnerability OBB-1284682

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

UPDATE: OWASP Dependency-Check 3.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.0.0! This release comes with Java 9...