gh-dork

gh-dork Proporcione una lista de dorks y, opcionalmente, una de las siguientes opciones: un usuario -u un archivo con una lista de usuarios -uf una organización -org un archivo con una lista de organizaciones -of un repositorio -r También puede pasar: un directorio de salida para almacenar...

trivy-action

Azione Trivy Azione GitHub per Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Indice dei contenuti Utilizzo Scansione pipeline CI Scansione pipeline CI con configurazione Trivy Cache Configurazione di Trivy Scansione di un archivio...

codeql

CodeQL Questo repository open source contiene le librerie e le query CodeQL standard che alimentano GitHub Advanced Security e gli altri prodotti di sicurezza applicativa che GitHub mette a disposizione dei suoi clienti in tutto il mondo. Come imparare CodeQL ed eseguire query? Esiste un'ampia...

mitmproxy

mitmproxy !autofix.ci:...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

Mlflow <2.9.2 - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6909 info: name: Mlflow 2.9.2 - Path Traversal author: Hyunsoo-ds severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Successful...

Linux Distros Unpatched Vulnerability : CVE-2026-105830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's...

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel,...

ransomwatch

ransomwatch 👀 🦅 ransomwatch monitora i siti di estorsione utilizzati dai gruppi ransomware e pubblica un feed aggregato delle rivendicazioni si prega di utilizzare il modello di issue quando si segnalano nuovi gruppi ⚠️ i contenuti all'interno diransomwatch.telemetry.ltd, posts.json, groups.json...

SUSE-SU-2026:4606-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infini...

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse Live CVE PoC Aggregator with Smart Search & Threat Intelligence CVE Pulse automatically discovers, scores, and indexes CVE Proof‑of‑Concepts from GitHub. It enriches them with EPSS scores and CISA KEV data, builds daily snapshots & diffs, and serves a fast, searchable static...

gha-lab-3b0a828a69

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gluestack/gluestack-ui at commit...

driftwood

Driftwood ⚠️ La herramienta CLI Driftwood ya no es compatible. ¡Por favor, usa TruffleHog en su lugar! ⚠️ Driftwood es una herramienta que te permite verificar si una clave privada se utiliza para cosas como TLS o como clave SSH de GitHub para un usuario. Driftwood realiza búsquedas con la clave...

gitrob

Gitrob: Poniendo el Código Abierto en OSINT Gitrob es una herramienta que ayuda a encontrar archivos potencialmente sensibles publicados en repositorios públicos de Github. Gitrob clonará los repositorios de un usuario u organización hasta una profundidad configurable, recorrerá el historial de...

raptor

Raptor es un escáner de vulnerabilidades de código fuente centrado en GitHub, basado en web servicio web + interfaz de usuario, es decir, escanea un repositorio con solo la URL del repositorio de GitHub. Puedes configurar webhooks para garantizar escaneos automáticos cada vez que realizas un comm...

gitls

Enumerar URLs de repositorios git a partir de una lista de URL / Usuario / Org. Amigable con pipelines. Esta herramienta es útil cuando el repositorio, como Github, está incluido en el alcance de bug bounty. A veces se especifica como un nombre de org o usuario en lugar de un repositorio...

reposaur

Reposaur Reposaur es la herramienta de cumplimiento de código abierto para plataformas de desarrollo. Audita, verifica y reporta tus datos y configuraciones fácilmente con políticas predefinidas y/o personalizadas. Soporta GitHub. Soporte para GitLab, BitBucket y Gitea próximamente. ⚠️ antes de...

ROOT-APP-GOBINARY-CVE-2026-41568 CVE-2026-41568 in github.com/docker/docker - Patched by Root

Root has patched CVE-2026-41568 in the github.com/docker/docker package for Root:Go. Multiple fixed versions available...

PT-2026-109314

Name of the Vulnerable Software and Affected Versions @tinacms/cli versions prior to 3.0.0 Description @tinacms/cli fails to properly escape or encode Git branch values read from VERCEL GIT COMMIT REF, GITHUB BRANCH, or HEAD. These raw values are incorporated into the API URL and interpolated int...