threatcl

threatcl HCLを使った脅威モデリング hcltmはどうなったの？ hcltmはthreatclに改名されました。ようこそ！ 概要 !TIP 新しいドキュメントを読みたいですか？threatcl.dev にアクセスしてください。 脅威モデルの文書化にはさまざまな方法があります。シンプルなテキストファイルから、より詳細なワード文書、集中型ソリューションでの完全に計装された脅威モデルまで様々です。脅威モデルの最も価値のある属性の2つは、脅威を明確に文書化できることと、価値ある変化を促進できることです。...

CVE-2018-17456

CVE-2018-17456 脆弱性の概要 脆弱性名： Git入力検証エラー脆弱性 CNNVD番号：CNNVD-201810-234 危険度：極めて危険 CVE番号：CVE-2018-17456 脆弱性タイプ：入力検証エラー 公開日：2018-10-08 脅威タイプ：リモート 更新日：2019-04-25 ベンダー：debian 脆弱性情報源：Atlassian、TerryZh... 脆弱性概要：...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Gitmails

開発 - 重要 この Gitmails バージョンはメンテナンスされなくなりました。メンテナンスされ、できれば開発が続けられているバージョンを使用したい場合は、Gitmails Shell ポートをチェックしてください。 シェルポートを使用したくない場合や Python バージョンを好む場合は、自由に Gitmails をフォークして、ご自身の望むパスに進めてください。 概要 Gitmails は、Git コミットに作者が設定した名前とメールアドレスが含まれていること、そしてバージョン管理ホストサービスが多くのプロジェクトを保存するために使用されていることを調査します。 Gitmails...

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2026-2036)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2036 advisory. A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before...

CVE-2026-59327

Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...

CVE-2026-59327

Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

EUVD-2026-48253

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65907

The vulnerability affects JetBrains TeamCity prior to 2026.1.2, where code execution was possible in Git VCS roots (2025.11.6). The issue is tied to TeamCity’s Git VCS integration, with impact described as CRITICAL (CVSS 3.1). Remediation: upgrade to TeamCity 2026.1.2 or later as indicated by the...

PT-2026-63981

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible within Git VCS roots. VCS Version Control System roots are configurations that define the source code...

JetBrains TeamCity < 2026.1.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2026.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration CVE-2026-59793 - In JetBrains TeamCity before...

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud...

CVE-2026-59793

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...

CVE-2026-59793

CVE-2026-59793 affects JetBrains TeamCity prior to version 2026.1.2. The issue allows arbitrary file access via the Perforce VCS integration, due to the Perforce VCS integration component. Impact is described as high for confidentiality, integrity, and availability. The CVSS vector indicates netw...

PT-2026-57184

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

EUVD-2026-41946

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

Terraform Enterprise vulnerable to arbitrary file read

Summary HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository...