48 matches found
secureboot_objects
セキュアブートオブジェクト このリポジトリは、Microsoftが推奨するセキュアブートオブジェクトを保持するために使用されます。 ドキュメントについては、Wikiをご覧ください！ バージョン管理 このリポジトリはセマンティックバージョニング .. に従っており、 これは、基礎となる変更の意味を伝えるバージョン管理スキームです。 バージョン構成要素 Major : ファームウェアのセキュアブートバージョン間での互換性のない変更を示します。 これは、ファームウェアまたは他のコンポーネントの更新が必要になる可能性がある重要な変更です。 （現在はバージョン1のみがあります。） Minor :...
nray
nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...
React2Shell-CVE-2025-55182-Detector
Предварительные требования Доступ к корневому каталогу проекта, содержащему package.json Одна из следующих сред выполнения, в зависимости от используемого скрипта: Python Javascript PowerShell Bash с установленным jq Использование Все скрипты должны выполняться из корневого каталога целевого...
cryptr
cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation root@kitploit: git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...
CLSA-2026-1779238050 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.4-tuxcare.1...
CLSA-2026-1775089654 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.2-tuxcare.1...
CLSA-2026-1775089629 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.1.3-tuxcare.1...
CLSA-2026-1772496674 TuxCare security update for semver (2 CVEs)
TuxCare rebuilt semver to address 2 CVEs. Fixed in 6.3.0-tuxcare.1...
Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava. Vulnerabilities include allowing a malicious user to modify the prototype of "Object" via proto, causing the addition...
CVE-2022-27201
Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
EUVD-2023-0515
Malicious code in bioql PyPI...
CVE-2023-24429
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
The vulnerability of the SemVer package manager NPM allows a hacker to trigger a service failure.
The vulnerability of the SemVer package manager NPM is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2022-25883
...
PT-2023-4569
Name of the Vulnerable Software and Affected Versions semver versions prior to 7.5.2 semver versions prior to 6.3.1 on the 6.x branch semver versions prior to 5.7.2 Description The issue is related to the use of a regular expression with inefficient computational complexity in the semver package,...
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
GHSA-PCC2-W6M8-X5W4 Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
GHSA-H8P8-6378-649P XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin
Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin
Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...