generator-burp-extension

Burp 扩展生成器 安装 首先，使用 npm 安装 Yeoman 和 generator-burp-extension（我们假设您已经预装了 node.js）。 npm install -g yo npm install -g generator-burp-extension 然后生成您的新项目： yo burp-extension Burp 扩展特性 当您生成插件项目时，生成器会询问您希望在插件中包含哪些特性。如果您熟悉 Burp 扩展开发，这些特性的名称已经足够描述其功能；但如果您是 Burp 扩展新手，以下是对每个特性所能实现功能的简短说明。 扩展标签页 GUI...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

CLEANSTART-2026-QA16480 Security fix for CVE-2025-61719 applied in: sigstore-scaffolding-fips 0.7.31-r0

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG34900 Security fix for CVE-2025-66506 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, sigstore-scaffolding 0.7.31-r2

CVE-2025-66506 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101433

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

Oracle Linux 9 : ELSA-2026-64812-0: / expat (ELSA-2026-648120)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648120 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219 Tenable has extracted the preceding description block...

expat security update

2.5.0-2.2 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 2.5.0-2.1 - Fix CVE-2026-50219 - Resolves: RHEL-220979...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, k8sgpt, fulcio, kaniko, cilium-cli, melange, gomplate, minio, zot, terragrunt, ksops, kargo, restic, step, spire-server, guac, trivy, zarf, sops, rqlite, cloudnative-pg, grafana-mimir, step-ca, sigstore-scaffolding,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tkn, teleport, witness, policy-controller, zot, skaffold, goreleaser, spire-server, trivy, zarf, cosign, falcoctl, ko, gitsign, sigstore-scaffolding, neuvector-sigstore-interface, buildkitd, vexctl, gh, kubescape, tekton-chains, flux-source-controller, trivy-operator...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, caddy, pulumi, kubeflow, skaffold, step, step-issuer, spark-operator, pulumi-kubernetes-operator, portieris, grafana-mimir, flyte, opa-envoy, sigstore-scaffolding, pulumi-language-yaml, terraform-provider-google,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sqlpad, timestamp-authority, k8sgpt, fulcio, tkn, pulumi, flux, policy-controller, zot, terragrunt, rook, goreleaser, ksops, py3-azure-identity, restic, velero, step, spire-server, guac, trivy, zarf, trino, sops, rclone, cosign, argo-events, falcoctl,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: cfssl, redka, ctop, elvish, vertical-pod-autoscaler, prometheus-adapter, timescaledb-parallel-copy, kapp, dask-gateway, crossplane, dfc, go-bindata, podinfo, spqr, kube-vip-cloud-provider, kuberlr, aws-s3-controller, mesosphere-vsphere-csi, mkcert, dive, maru,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, cfssl, kubeflow-katib, redka, hivemind, kube-bench, runc, stern, gcsfuse, ctop, wave, bom, elvish, docker-credential-acr-env, manifest-tool, terraform-provider-time, vertical-pod-autoscaler, argo-rollouts, kubebuilder, opensearch-k8s-operator,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, cfssl, kubeflow-katib, redka, hivemind, kube-bench, runc, stern, gcsfuse, ctop, wave, bom, elvish, docker-credential-acr-env, manifest-tool, terraform-provider-time, vertical-pod-autoscaler, argo-rollouts, kubebuilder, opensearch-k8s-operator,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, cfssl, kubeflow-katib, redka, hivemind, kube-bench, runc, stern, gcsfuse, ctop, wave, bom, elvish, docker-credential-acr-env, manifest-tool, terraform-provider-time, vertical-pod-autoscaler, argo-rollouts, kubebuilder, opensearch-k8s-operator,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, cfssl, kubeflow-katib, redka, hivemind, kube-bench, runc, stern, gcsfuse, ctop, wave, bom, elvish, docker-credential-acr-env, manifest-tool, terraform-provider-time, vertical-pod-autoscaler, argo-rollouts, kubebuilder, opensearch-k8s-operator,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, cfssl, kubeflow-katib, redka, hivemind, kube-bench, runc, stern, gcsfuse, ctop, wave, bom, elvish, docker-credential-acr-env, manifest-tool, terraform-provider-time, vertical-pod-autoscaler, argo-rollouts, kubebuilder, opensearch-k8s-operator,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: cfssl, redka, ollama, ctop, nvidia-container-toolkit, elvish, cilium-cli, vertical-pod-autoscaler, volume-modifier-for-k8s, blobfuse2, kubernetes-dashboard, prometheus-adapter, kapp, dask-gateway, go-bindata, podinfo, spqr, cert-manager-istio-csr,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, crossplane-provider-aws-route53, kubeflow-katib, redka, kube-bench, runc, tigera-operator, ctop, buildah, kaniko, docker-credential-acr-env, gomplate, manifest-tool, flux, vertical-pod-autoscaler, volume-modifier-for-k8s, argo-rollouts, terragrunt,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, atlantis, cfssl, buf, kubeflow-katib, libssh2, ollama, bom, cilium-cli, docker-credential-acr-env, gomplate, melange, flux, terragrunt, temporal-server, crossplane-provider-azure-authorization, kubernetes-dashboard, spire-server,...