Intelligence Digest
github安全推送
GitHub 安全开源项目与漏洞监控情报推送
来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。
Consider if we want to support channel defaults for gRPC clients
See https://github.com/spring-projects/spring-grpc/pull/347
If we do this we should also consider HTTP Service Clients
OTEL_SDK_DISABLED and friends doesn't disable publishing OpenTelemetry
I apologize if this turns out to be a documentation thing, but I am unable to find a way to disable OpenTelemetry publishing based on any of the options I can find. I've tried a number of ways to disable publishing to my...
rippsec/CVE-2024-24590-ClearML-RCE-Exploit
language: Python
rippxsec/CVE-2024-24590-ClearML-RCE-Exploit
language: Python
Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/')
Version 4.0.2
Context: gitlab CI build with DinD configured and DOCKER_HOST defined as tcp://docker:2375 with tls disabled ( environment variables: DOCKER_HOST: tcp://docker:2375/, DOCKER_TLS_VERIFY: '', DOCKER_CERT_PAT...
RouterFunctions descriptions in Actuator do not support nesting
Hello!
Currently, I'm migrating over the non-reactive RouterFunctions with Spring Boot 4.0.3 using this code:
```java
@Bean
public RouterFunction<ServerResponse> testEndpoints() {
return RouterFunctions....
Provide a clearer link between the documented managed dependency coordinates and version properties
Going along the lines of https://github.com/spring-projects/spring-boot/issues/21723 etc. (i.e. switching from the Spring Dependency Management Plugin to `platform` declarations), one stumbles upon the following problem:...
kyakei/CVE-2023-43208
CVE-2023-43208: Mirth Connect Pre-Auth RCE PoC | language: Python
rce/flipper-blinds
Somfy RTS blind controller for Flipper Zero, written in Rust 🐱 | language: Rust
Restore dependency alignment checks for Couchbase Client
We had to disable it to [upgrade the Couchbase Client](https://github.com/spring-projects/spring-boot/issues/49252) after Spring Data had released their milestone.
The code to restore is available in https://github.com/...
优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。
当前条件下没有命中网安开源项目。