702 matches found
pulledpork
PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...
trivy-action
Trivy Action GitHub Action のための Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense 目次 使用法 CI パイプラインのスキャン CI パイプラインのスキャン（Trivy 設定あり） キャッシュ Trivy のセットアップ Tarball のスキャン テンプレートを使用した Trivy の利用 GitHub Code Scanning を使用した Trivy の利用 Trivy を使用し...
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 は、バージョン 5.6.0 以降の xz ユーティリティの上流 tarball で発見された重大なセキュリティ脆弱性です。この脆弱性には、複雑な難読化を通じて liblzma のビルドプロセスを操作する悪意のあるコードが含まれています。 このリポジトリの目的 このリポジトリは、お使いのシステムで xz が脆弱かどうかを確認し、自動的に修正するのに役立ちます。 使用方法: root@kitploit: $ python3 detect.py デモ:...
CVE-2023-37478_npm_vs_pnpm
pnpm vs npm エクスプロイト このリポジトリは、tarball からの npm と pnpmのインストール方法の違いがどのように悪用され得るかを示しています。 このエクスプロイトは CVE-2023-37478 に記録されています。 ここで構築された JavaScript パッケージは、ユーザーに良いメッセージを表示すると主張しています。npm でインストールした場合、これは本当です。 しかし、同じパッケージを pnpm でインストールすると、意地悪なメッセージが表示されます。 これがより悪意のある形で悪用される可能性は想像に難くないでしょう。...
Linux---Security---Detect-and-Mitigate-CVE-2024-3094
Linux- セキュリティ- CVE-2024-3094 の検出と緩和 xz のバージョン 5.6.0 以降のアップストリーム tarball に悪意のあるコードが発見されたと判断されました。 この脆弱性の影響を受けたのは、特定のオペレーティングシステムとそのバージョンのみであると判断されました。 このリポジトリは、この脆弱性の影響を受けたシステムの検出に役立つツール、技術、スクリプトを提供します。 Linux システム、特に侵害されたバージョンの影響を受けたシステムに焦点を当てています。 影響を受けるディストリビューションの特定と緩和策の実施に関するガイダンスが含まれています。...
OESA-2026-3928 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...
CS50FinalProject
CS50 Intro to Cybersecurity – 最終プロジェクト ケーススタディ: XZ Utils バックドア CVE-2024-3094 このリポジトリは、XZ Utils バックドアに関する7〜10分のプレゼンテーションをサポートするものです。バックドアの概要、リリース tarball を介したバックドアの仕組み、および関連するサプライチェーン軽減策を含みます。 資料 スライド PDF: A Near-Miss in the Supply Chain: The XZ Utils Backdoor CVE-2024-3094.pdf 参考資料: ./References....
OESA-2026-3862 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...
OESA-2026-3861 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...
OESA-2026-3863 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...
OESA-2026-3860 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...
SUSE CVE-2026-53476
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
UBUNTU-CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837
A command injection vulnerability was identified in rpm , specifically in the gettarspec function used by rpmbuild -t*. The root cause is an unescaped tarball path or filename that, when containing shell metacharacters, allows an attacker to inject arbitrary commands. This is particularly relevan...
CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
GHSA-VQ4V-J7R6-JQ4M pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install
Summary When resolving a package, pnpm uses the resolved manifest name as a raw path segment for the isolated-linker import target. A tarball dependency whose package.json name is a scoped path traversal @x/../../…/ is therefore extracted outside nodemodules, to an attacker-chosen absolute path,...
NPM: pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install
NPM: pnpm: A tarball dependency's manifest name escapes nodemodules → arbitrary file write/overwrite on install vulnerability discovered by ? in WordPress Npm pnpm versions 10.34.5...