GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: dex, gitsign, aactl, frp, temporal-ui-server, minio, neuvector, bank-vaults, vexctl, apko, tekton-chains, gomplate, flux-source-controller, policy-controller-fips, rabbitmq-messaging-topology-operator, kubescape, step-ca, vault, goreleaser, tkn, sops, weaviate,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: kaniko, flux-notification-controller, crossplane-provider-aws-firehose, crossplane-provider-aws-iam, goreleaser, crossplane-provider-aws-ec2, actions-runner-controller, tkn, flux-kustomize-controller, sops, zarf, cosign-fips, crossplane-provider-aws-s3, gitsign,...

Malicious code in helm-secrets-sops-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90757472cd29931d6c7fbc69f6821bd0be3b056fdf34c1d231e3c4ad896f2f54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...

GHSA-X5C7-X7M2-RHMF Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...

Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...

EFB Tampering 1. Introduction and Class Differences

TL;DR Electronic flight bags EFBs are devices that flight crews use to help with flight management tasks Different airlines use different devices e.g. iPads, netbooks, custom devices Some are carried on by flight crew, others are built-in to the cockpit Some important functions are carried out by...