-
[CWE-829: Inclusion of Functionality from Untrusted Control Sphere](https://cwe.mitre.org/data/definitions/829.html)
[CWE-494: Download of Code Without Integrity Check](https://cwe.mitre.org/data/def…
-
I'm thinking of adding a container security audit to the CI process, e.g.: https://github.com/aquasecurity/trivy
WDYT?
-
Vulnerable Library - axios-5.13.1.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/follow-redirects/package.json
Found in HEAD commit: d15d896364c4214a7c2d8c1…
-
For the systemd journal support to work in the published Docker images (`grafana/loki`), we currently require promtail to be based on top of one of the Debian images due to the runtime depedency on `l…
-
**_301 Moved Permanently_: The [updated version of the Threat Model](https://github.com/w3c-cg/threat-modeling/blob/main/models/decentralized-identities.md) is in the [Threat Model Community Group](ht…
-
https://app.hackthebox.com/machines/Beep
```
$ nmap -sC -sV -Pn 10.10.10.7
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-03 14:35 JST
Nmap scan report for 10.10.10.7
Host is up (0.17s l…
-
Link anything you'd like to discuss: news, demos, ideas, whatever!
-
Hi
There was a CVE assigned recently, CVE-2024-3209. The report in https://vuldb.com/?submit.304575 mention that it should be known upstream.
Is there a fix for this issue?
-
Total: 333 (UNKNOWN: 0, LOW: 183, MEDIUM: 71, HIGH: 77, CRITICAL: 2)
====================================
$ docker run --rm -v ~/.cache/trivy:/root/.cache/ aquasec/trivy:${VERSION} -debug $DUT:late…
-
There is a new major version of github.com/alexedwards/scs which looks like it has some breaking changes. We should either update to it or consider moving to a new package as this one appears to have …