threatcl

threatcl HCL을 사용한 위협 모델링 hcltm은 어떻게 되었나요? hcltm이 threatcl로 이름이 변경되었습니다. 환영합니다! 개요 !TIP 새 문서를 읽고 싶으신가요? threatcl.dev를 방문하세요. 위협 모델을 문서화하는 방법은 다양합니다. 간단한 텍스트 파일부터 더 상세한 워드 문서, 완전히 계측된 중앙 집중식 솔루션까지 여러 형태가 있습니다. 위협 모델의 가장 가치 있는 두 가지 속성은 위협을 명확하게 문서화하고 가치 있는 변화를 이끌어낼 수 있는 능력입니다. threatcl은 다음 목표에 중점을 두...

CVE-2018-17456

CVE-2018-17456 脆弱性の概要 脆弱性名： Git入力検証エラー脆弱性 CNNVD番号：CNNVD-201810-234 危険度：極めて危険 CVE番号：CVE-2018-17456 脆弱性タイプ：入力検証エラー 公開日：2018-10-08 脅威タイプ：リモート 更新日：2019-04-25 ベンダー：debian 脆弱性情報源：Atlassian、TerryZh... 脆弱性概要：...

Gitmails

Entwicklung - WICHTIG Diese Gitmails-Version wird nicht mehr gewartet. Schauen Sie sich den Gitmails Shell-Port an, wenn Sie eine Version verwenden möchten, die gewartet und hoffentlich weiterentwickelt wird. Wenn Sie den Shell-Port nicht verwenden möchten und die Python-Version bevorzugen, könne...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

CVE-2026-59327

Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...

CVE-2026-59327

Spring Tools for Eclipse stores the Spring Boot DevTools remote secret spring.devtools.remote.secret as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, either to workspace metadata or, if the us...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

EUVD-2026-48253

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65907

The vulnerability affects JetBrains TeamCity prior to 2026.1.2, where code execution was possible in Git VCS roots (2025.11.6). The issue is tied to TeamCity’s Git VCS integration, with impact described as CRITICAL (CVSS 3.1). Remediation: upgrade to TeamCity 2026.1.2 or later as indicated by the...

PT-2026-63981

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible within Git VCS roots. VCS Version Control System roots are configurations that define the source code...

JetBrains TeamCity < 2026.1.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2026.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration CVE-2026-59793 - In JetBrains TeamCity before...

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud...

CVE-2026-59793

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...

CVE-2026-59793

CVE-2026-59793 affects JetBrains TeamCity prior to version 2026.1.2. The issue allows arbitrary file access via the Perforce VCS integration, due to the Perforce VCS integration component. Impact is described as high for confidentiality, integrity, and availability. The CVSS vector indicates netw...

PT-2026-57184

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration...

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

EUVD-2026-41946

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

CVE-2026-14468

HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository content in ...

Terraform Enterprise vulnerable to arbitrary file read

Summary HashiCorp Terraform Enterprise contained an issue in its version control system VCS ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outside the intended repository...

CVE-2026-14439

CVE-2026-14439 describes a path-traversal in the Git Service shared by Altium Enterprise Server and Altium 365. The vulnerability arises from a post-clone file-manipulation primitive that accepts user-supplied paths without validation, enabling an authenticated user with basic git access to move ...