secfesc

/ / / / / / // / / / / // / / ///// /// このプロジェクトは開発ツールとしてAIを使用しています。 すべてのコードは作者によって人間によるレビュー、テスト、メンテナンスが行われています。 クイックスタート pip install secfesc secfetch Quick security overview secscan Basic audit no root sudo secscan --full Complete audit requires root 2つのツールが1つに ツール| 目的| 実行ユーザー ---|---|---...

CVE-2026-0292

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...

CVE-2026-35366 uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...

PT-2025-35523

Name of the Vulnerable Software and Affected Versions SonarQube versions 4 through 5.3.0 Description SonarQube is a static analysis solution for continuous code quality and security inspection. A command injection issue was identified in the SonarQube Scan GitHub Action. Untrusted input arguments...