325 matches found
git-alerts
GitAlerts ใฉใฎใใใชๅ้กใ่งฃๆฑบใใใฎใ๏ผ GitHubใชใใธใใชใฏใ็ต็นใฎไธใซไฝๆใใใใใฎใฏGitHub็ฎก็่ ใๅถๅพกใงใใพใใใใใใ็ต็นใฎใฆใผใถใผใขใซใฆใณใใฎไธใซไฝๆใใใใชใใธใใชใฏใ็ต็นใGitHub Enterprise Managed User EMU ใขใใซใๆก็จใใฆใใชใ้ใใๅถๅพกใงใใพใใใ ็ต็นใฎใฆใผใถใผใขใซใฆใณใไธใซใใๅ ฌ้ใชใใธใใชใงใ่ชคใฃใฆไฝๆใใใใใในใ็ฎ็ใงไฝๆใใใใใฎใฏใใทใผใฏใฌใใใๅ ้จๆ ๅ ฑใใณใผใใชใฉใๆผๆดฉใใใๅฏ่ฝๆงใใใใพใใGitAlertsใฏใใฎใใใชใฑใผในใๆคๅบใใ็ฃ่ฆใใใฎใซๅฝน็ซใกใพใใ ไพ ็ฎก็่ ใๅถๅพกๅฏ่ฝ...
In-Spectre-Meltdown
In-Spectre-Meltdown ใใฎใใผใซใฏใๅคใใฎๆๆฐใใญใปใใตใใใณใชใใฌใผใใฃใณใฐใทในใใ ใฎ่จญ่จใซๅฝฑ้ฟใไธใใๆๆฉ็ๅฎ่กใตใคใใใฃใใซๆปๆใใใงใใฏใใใใใฎใใฎใงใใCVE-2017-5754๏ผMeltdown๏ผใใใณCVE-2017-5715๏ผSpectre๏ผใซใใใ้็นๆจฉใใญใปในใ็นๆจฉใใญใปในใใๆฉๅฏๆ ๅ ฑใ็ใฟๅบใใใจใๅฏ่ฝใซใชใใพใใใใใใฎๆปๆใฏใCPUไธใฎใใผใฟไฟ่ญทๅฏพ็ญใไพตๅฎณใใ3ใคใฎ็ฐใชใๆนๆณใๆไพใใๆปๆ่ ใๆฌๆฅ่ชญใใชใใใผใฟใ่ชญใฟๅใใใจใๅฏ่ฝใซใใพใใ...
redact
redact ๅจๅญ็ฌฆไธฒๅฐ่พพๆฅๅฟใ้ฅๆตๆไปปไฝ็ฌฌไธๆนๆด้ฒ้ขไนๅ๏ผๅฅ็ฆปๅ ถไธญ็ฑปไผผๅญๆฎ็ๅ ๅฎน ๅฑไบphpboyscout Go ๅทฅๅ ทๅ ็ไธ้จๅ โโ ไป go-tool-base ไธญๆๅ็ๅฐๅใๆ ๆกๆถ Go ๆจกๅใๆๆกฃ๏ผredact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact ๅจๅฏไฟกไธไธๅฏไฟกๅฏ่งๆตๆง่กจ้ขไน้ด็่พน็ไธ ๏ผไป่ช็ฑๆ ผๅผๅญ็ฌฆไธฒไธญๅฅ็ฆป็ฑปไผผๅญๆฎ็ๅ ๅฎน โโ ้ฅๆตไพๅบๅใๆฅๅฟ่ๅๅจใๆๆ ๅญๅจใ้่ฏฏๆถๆฏใๅฝไปค่กๅๆฐๅ HTTP ๅคดๅผ็ปๅธธๆ ๆไธญๆบๅธฆๆบๅฏ๏ผๅ ๅซๅ ๅต็จๆทไฟกๆฏ็ URLใos.Args ไธญ็ --api-key=sk-โฆ...
dracon-utilities
ใใฎใชใใธใใชใซใฏ README ใใใใพใใใ...
CVE-2026-27886-check
CVE-2026-27886 ่ๅผฑๆง่ฉไพกใใผใซ ๅฎๅ จใชใขใซใฆใณใไนใฃๅใใใงใผใณใๅฎ่กใใใใจใชใใStrapi ใคใณในใฟใณในใ CVE-2026-27886 ใซๅฏพใใฆ่ๅผฑใใฉใใใๅฎๅ จใซๆคๅบใใพใใBishop Fox ใใญใฐใฎๅฎๅ จใช่จไบใๅ็ งใใฆใใ ใใใ ่ชฌๆ CVE-2026-27886 ใฏใStrapi ใใผใธใงใณ 4.0.0 ใใ 5.36.1 ใซใใใใ่ช่จผใใใฆใใชใใใฉใกใผใฟใตใใฟใคใผใผใทใงใณใฎใใคใในใงใใใใใซใใใใชใขใผใใฎๆช่ช่จผๆปๆ่ ใใใใชใใฏ Content API ใ้ใใฆ็ฎก็่ ใฎ็งๅฏๆ ๅ ฑใๆผๆดฉใใใใใจใใงใใพใใใใฌใผใ ใฏใผใฏใฎ @strapi/uti...
yolo-cage
yolo-cage: ๅฎณใๅใผใใชใ่ชๅพใณใผใใฃใณใฐใจใผใธใงใณใ ใใชใใฏ่ฒฌไปปใใใจใณใธใใขใงใใๆใๆฉๅฏๆงใฎ้ซใใทในใใ ใใณใผใใใผในใAIใซๅฅฝใๅๆใซใใใใใฏใใพใใใ ใ ใใใใใClaude Codeใฎใใใชใใผใซใฎๅฎๅ จๆฉๆงใๆฑบใใฆ ็กๅนใซใใใใใพใใใๅฑ้บใชๆไฝใใจใซ่จฑๅฏใๆฑใใฆใใใฎใงๅฎๅ จใงใ๏ผ ใใใงๅพ ใกใๅฟ็ญใใพใใใใใฆๅคๆญ็ฒใใ่จชใใพใใใใใฆใใใ่ตทใใใฎใงใใ ่จฑๅฏใใญใณใใใฏในใฌใใใขใใซใฎๆใๅผฑใ้จๅใใคใพใ็ฒใใใฆใผใถใผใ่ฆ่ฝใจใใฆใใพใใใจใผใธใงใณใใซๅใไธใใคใค็็บๅๅพใๅถ้ใใๅคๆญใPRใฌใใฅใผใพใงๅ ้ใใงใใใใฉใใงใใใ๏ผ...
GO-2026-6529 AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets in github.com/anycable/anycable-go
AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets in github.com/anycable/anycable-go. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If...
GHSA-444V-8VXR-P36H OpenBao Agent Writes Secrets to Stdout
Impact During certain error conditions, OpenBao Agent's exec rendering mode will incorrectly write secrets specified in envtemplate to stdout. This primarily happens when numretries is met. This vulnerability is original to Vault and was reported via the OpenBao security mailing list. Patches Thi...
OpenBao Agent Writes Secrets to Stdout
Impact During certain error conditions, OpenBao Agent's exec rendering mode will incorrectly write secrets specified in envtemplate to stdout. This primarily happens when numretries is met. This vulnerability is original to Vault and was reported via the OpenBao security mailing list. Patches Thi...
EUVD-2026-71260
IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem โ including server secret material secretkey, JWT signing keys, the application database, /proc/self/environ, and other tenants' upload directories โ by supplying absolute pat...
CVE-2026-75033 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...
CVE-2026-75033 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...
CVE-2026-75033 Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the...
CVE-2026-75033
CVE-2026-75033 is a cross-cluster secret leakage vulnerability in Rancher Manager (before 2.15.1 ). Project Secrets were propagated into a namespace based solely on the field.cattle.io/projectId annotation, without verifying that the referenced project belonged to the same downstream cluster. An ...
PT-2026-80230
Summary Unleash's addon/integration subsystem lets an operator configure a webhook and the Slack, Microsoft Teams, Datadog, and New Relic integrations with a target url parameter. Whenever a subscribed feature-flag event fires, the Unleash server itself issues an HTTP request to that configured...
CVE-2026-73834
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret data are collected without redaction. When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulti...
CVE-2026-73834
A flaw in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes allows ACM wrapper Custom Resources that embed Secret data to be collected without redaction . When an administrator runs must-gather, credentials and tokens are captured in cleartext in the resulting archiv...
Improper Verification of Cryptographic Signature
Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...
PYSEC-2026-3756
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...
PYSEC-2026-3756
opensslencrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.fromdict that creates key bundles from untrusted data without verifying signatures. Attackers can call fromdict followed by toidentity without signature verification to encrypt data using attacker-controlled public...