CVEs | A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for vari | Hacking library

I am using Jib to pull a base image, add my wrapper java code to it, and build my image on top of that. Due to the widely known log4j CVE in December 2021, we are looking for a way to remove the vulnerable classes. (Now more CVEs are found in 2022, one of them has a score of 10.0, the highest possible. See https://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-37215/Apache-Log4j.html)

The base image is near EOL, so the provider answered that they would not release a new version; besides, log4j 1.x also reached EOL long before. But the current situation is that we have no plan of upgrading the base image to next version, so removing the classes seem to be the only way now.

The base image will use /opt/amq/bin/launch.sh as entrypoint. And I have found that I can use customized entrypoint to run a script before that, which removes the classes. Like /opt/amq/bin/my_script.sh, and in that I have run_fix.sh && /opt/amq/bin/launch.sh.

Then I realized that even this would work by mitigating the risk when the application is actually running, the vulnerability scan(part of security process) will still raise alarms while examining the image binary, as this is a static process done before the image is uploaded to the docker registry for production, way before actually running it. They can only be removed at the moment when the application runs, aka at runtime.

Can jib pre-process the base image while doing Maven build(mvn clean install -Pdocker-build) instead of only allowing it at runtime? According to what I have read, I understand it's a big NO, and there's no plugin for it yet.

I am having a hard time to retrieve json data from a long text using json library. Data is retrieved from cisco bug search tool api via curl (text.txt).

My code only recognize the the root element. Sub elements are not retrieved.

I am not sure what I am missing.

Code:

I have an Excel worksheet called "Main" which includes a set amount of columns, one of which contains a listing of different codes (CVE's) regarding patches that need to be installed on worksheets based on criteria from the internet.

The codes to search for are not in a set format, other than being in strings containing the code.

I manually created a number of worksheets based on keywords in these strings, that will eventually, contain all the lines from the master sheet, but only those defined by the name of the keyword I want.

For example, I have a worksheet named "Microsoft" that should contain all the rows from the master sheet that refer to Microsoft CVE's, based on a search of the string and finding the word "Microsoft". Same for Adobe and so on.

I created a script to copy the rows, as well as create a new Index sheet that lists the amount of rows found for each keyword that have been copied from the master sheet to the relevant sheet.

And this is where I get lost.

I have 18 worksheets which are also keywords. I can define a single keyword and then copy everything over from the main worksheet for one keyword.

I need a loop (probably a loop within a loop) that reads the worksheet names as defined in the Index, searches for all the relevant rows that contain a CVE regarding that keyword, and then copy the row over to the relevant worksheet that I created into the relevant row on that worksheet.
For example, if I have copied two rows, the next one should be written to the next row and so on, until I have looped through all the worksheet (keyword) names and have reached the empty row after the last name in the Index sheet.

My code, set for only one keyword for a limited run to test works.
I need to loop through all the keywords and copy all the data.
In the end, I want to copy the relevant row from the master worksheet (Main) to the relevant worksheet (based on keyword worksheet name in the Index worksheet), and delete the row after it was copied from the master worksheet.
I should end up with all the data split into the relevant worksheets and an empty (except for headers) master worksheet.

This is what I have so far (from various examples and my own stuff).

I have the following invalid JSON string which I'd like to convert into valid JSON (so each "template" will have a vuln-x key before it):

So i have this jinja2 code

Quick help needed! I have list of data rendered in a table from an API. I need this list of data to be paginated into small list of data.

Here is the code for VendorsDetail.js which displays list of data in a table

This is the output format, and based on "CVE_data_meta" I need to deduplicate matching IDs.

Im looking at some Species of amphibians/reptiles found in a rainforest reserve using two different survey methodologies. I want to compare the methodologies, but one methodology has a lot more data than the other.

Within the study site, there are also three different zones with different levels of disturbance (CCR, PCR, and SLR), these also have varying amounts of effort to one another within and between the two survey methods.

I want to create two extrapolated species accumulation curves for each methodology, one including all disturbance types and another with the disturbance types split up.

I've managed to create the accumulation curves, but they are not extrapolated past the number of individuals observed. How can I extrapolate the curves?