android-check

Android チェック Android プロジェクト向け静的コード解析プラグイン。 使用方法 /build.gradle の変更: root@kitploit: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... //build.gradle の変更: root@kitploit: apply plugin: 'com.noveogroup.android.check' 設定 推奨設定 推奨設定はデフォルト（空）です。...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

zap-scripts

zap-scripts Scripts do Zed Attack Proxy para encontrar CVEs e segredos. Compilação Este projeto usa Gradle para compilar o add-on do ZAP, basta executar: root@kitploit: ./gradlew build no diretório principal do projeto, o add-on será colocado no diretório build/zapAddOn/bin/. Utilização A maneira...

Spring4Shell

Spring4Shell Come compilare? gradle build Come installare? Caricare Spring4shell nella scheda Burp Extender...

CVE-2022-0219

CVE-2022-0219 O Jadx é vulnerável a Restrição Incorreta de Entidades Externas XML CWE-611 ao exportar um arquivo APK malicioso através da opção -e contendo um AndroidManifest.xml / strings.xml manipulado para o gradle. Isso pode levar à divulgação de arquivos locais quando usado a partir da CLI...

creadur-rat-gradle

Plugin Gradle per Apache RAT Release Audit Tool Questo plugin consente di eseguire lo strumento di audit delle release Apache RAT, focalizzato sulle licenze. Installazione Nel tuo file build.gradle.kts: root@kitploit: plugins id"org.nosphere.apache.rat" version "0.8.1" Utilizzo Il plugin registra...

gradle-static-analysis-plugin

DEPRECATO Plugin di analisi statica per Gradle ⚠️ Un fork di questo progetto è mantenuto su https://github.com/GradleUp/static-analysis-plugin/ Si prega di migrare utilizzando l'ID del plugin com.gradleup.static-analysis. Un plugin Gradle per applicare facilmente la stessa configurazione di...

diffplug__goomph_CVE-2022-26049_3-37-1

Goomph: IDE come artefatto di build Anche plugin per lavorare con SWT, OSGi, p2 e Eclipse RCP...

4062-1

Esempio di Black Duck CoPilot Gradle/Travis CI Mostra una configurazione funzionante per utilizzare l'integrazione Black Duck CoPilot nell'analisi del rischio delle dipendenze del progetto Configurazione Travis CI Il file .travis.yml è stato modificato per caricare i dati delle dipendenze generat...

gradle-cve-2021-29427-demo

gradle-cve-2021-29427-demo gradle cve...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

android-app

ProtonVPN für Android Copyright c 2019 Proton AG Download !Get it on GitHubhttps://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676...

CVE-2026-76228

A flaw was found in Renovate. This command injection vulnerability occurs when Renovate processes Gradle Wrapper updates. An attacker can introduce a malicious gradle-wrapper.properties file into a scanned repository, where a specially crafted distributionUrl containing shell command substitution...

CVE-2026-76228

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

CVE-2026-76228

Renovate versions >=32.124.0 before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) pass attacker-controlled distributionUrl values from gradle-wrapper.properties directly into a shell command (/bin/sh -c ... ./gradlew :wrapper --gradle-distribution-url ), allowing shell command subst...

EUVD-2026-62469

Renovate versions =32.124.0 and before 42.68.5 and Mend renovate-ce/renovate-ee before 13.3.0 contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell e.g. /bin/sh -c ... ./gradle...

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by CVE-2026-73413 via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: CVE-2026-73413 Source advisory: SNYK:JS-SHESCAPE-18752068...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, conductor-fips, nextflow, jbang, opensearch, apache-hop-fips, scala, metabase, conductor, wazuh-indexer, apache-hop, apache-tika, apache-tika-fips, elasticsearch, elasticsearch-fips, gradle, copybara-fips, opensearch-fips, copybara...