lynis

문서 이 소프트웨어가 마음에 드시나요? 프로젝트에 별표를 눌러 스타게이저가 되어보세요. lynis Lynis - UNIX 기반 시스템을 위한 보안 감사 및 강화 도구. Lynis는 Linux, macOS, BSD 등 UNIX 기반 시스템을 위한 보안 감사 도구입니다. 시스템 자체에서 실행되며 심층 보안 스캔 을 수행합니다. 주요 목표는 보안 방어를 테스트하고 추가 시스템 강화를 위한 팁을 제공 하는 것입니다. 또한 일반 시스템 정보, 취약한 소프트웨어 패키지, 가능한 구성 문제를 스캔합니다. Lynis는 시스템 관리자와 감사자...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

CVE-2026-85623

A flaw was found in goose. This vulnerability allows attackers to execute arbitrary commands by distributing malicious recipes that leverage insecure recipe standard input/output stdio extensions and retry checks. This bypasses the existing security scan, enabling the execution of shell commands...

EUVD-2026-71230

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

Fake Microsoft security scans trick victims into uninstalling their antivirus

A wave of websites is offering to check whether your antivirus is working. They call themselves SysScan , carry Microsoft branding, and all reach the same conclusion: Your computer has serious problems, and the cause is the antivirus software you installed. Windows, they claim, no longer supports...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, boring-registry-fips, pluto-fips, mattermost-fips, zitadel, istio-fips, grafana, tkn-fips, neuvector-sigstore-interface-fips, beats-fips, k9s-fips, kyverno, rancher-security-scan, grafana-fips, jitsucom-bulker, bank-vaults, ratify-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: manifest-tool, kube-mgmt-fips, kubescape, oras-fips, cloudbeat, kube-mgmt, ocm-kubernetes-controller, trivy-operator, helm-mapkubeapis, linkerd2, helm-set-status, conftest, kyverno, chaos-mesh-fips, crossplane-fips, helm-push, kots, redpanda-operator, helm-operator,...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: terraform, external-secrets-fips, kube-oidc-proxy, fulcio-fips, falcosidekick-fips, stern, velero-plugin-for-aws-fips, kube-state-metrics-fips, newrelic-nri-statsd, kube-bench-fips, metrics-server-fips, nri-discovery-kubernetes, policy-controller-fips,...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-qemu-melange, linux-aws...

preflight v0.20.0

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

EUVD-2026-45992

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

CVE-2026-44444 Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety scan assertSafeBackendBundle. A malicious extension that ships a package.json with a preinstall,...

CVE-2026-44444

Lumiverse before 0.9.7: the Spindle extension build pipeline runs bun install without --ignore-scripts prior to the static backend safety scan (assertSafeBackendBundle). A malicious extension containing a package.json with preinstall, postinstall, or prepare lifecycle scripts can achieve host‑lev...

CVE-2026-44444 Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety scan assertSafeBackendBundle. A malicious extension that ships a package.json with a preinstall,...

CVE-2026-41377

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings...

CVE-2026-41377 OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings...

CVE-2026-41377

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings...

CVE-2026-41377 OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installation

OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do not block installation. Attackers can exploit scan failures to install untrusted plugins when operators proceed despite visible scan warnings...