tari

cfg/cis-1.6's 4.2.1 get a false negative result

3

**Overview** if kubelet run only with cmd parameter `--anonymous-auth=false` and cannot find configuration file in server, cis-1.6-4.2.1 rule will get a false negative result **How did you run kube-bench?** ```bash...

Python3.6.8请求一些https网站时报 ssl.SSLEOFError: EOF occurred in violation of protocol (_ssl.c:852) 错误

2

使用的是master分支最新 docker 版本 环境：MacOS 13.0.1，Docker Desktop 4.16.2，Docker Engine 20.10.22 在ARL层面，表现为获取不到任何站点，原本可以收集到很多信息的。 应该是在 ProbeHTTP 类的方法通过 requests 请求站时出现问题 进入容器内，通过 Python requests 请求该网站报错 完整报错 ```log Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 603,...

install cve-2022-0492 ```bash ./metarget cnv install cve-2022-0492 --verbose ``` after reboot ```bash uname -a Linux metarget2 5.8.0-050800rc1-generic #202007141143 SMP Tue Jul 14 11:45:39 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux ```...

Cannot injector to victim with -c option

5

I try to inject to victim through ```bash ./injector -c 192.168.192.16 ``` but cannot spawn a shell from victim could I get any help from you?

AMBARI-26059: Update builder and resource provider

5

## What changes were proposed in this pull request? (Please fill in changes proposed in this fix) ## How was this patch tested? (Please explain how this patch was tested....

[download fail]: 喜马拉雅 ximalaya

3

**Website name**: https://www.ximalaya.com **OS:**: macOS **Video URL:**: https://www.ximalaya.com/sound/287165425 **Stack overflow** ``` lux https://www.ximalaya.com/sound/287165425 Downloading https://www.ximalaya.com/sound/287165425 error: request error: Get "": unsupported protocol scheme "" github.com/iawia002/lux/request.Request /Users/xxx/go/pkg/mod/github.com/iawia002/[email protected]/request/request.go:108 github.com/iawia002/lux/request.Headers /Users/xxx/go/pkg/mod/github.com/iawia002/[email protected]/request/request.go:178 github.com/iawia002/lux/request.Size /Users/xxx/go/pkg/mod/github.com/iawia002/[email protected]/request/request.go:188...

FC 函数计算 暴露面分为两种情况 1. 服务函数开启了 HTTP 触发器，导致公网可以直接访问，如果代码有漏洞可能会被恶意利用 2. 服务函数开启了 HTTP 触发器，但关闭了公网访问，但如果此时配置了自定义域名，仍然可以从公网访问 上述两种在此 PR 均支持，下图为列出自定义域名的运行成功截图

xxl-job-admin v2.3.0 Stored XSS and CSRF Vulnerabilities Combination to Create Administrator

2

### Version and Deployment **Product Version** xxl-job-admin v2.3.0  **Deployment** ```bash mkdir -p /tmp/xxl-job docker run -d -e PARAMS="--spring.datasource.url=jdbc:mysql://{MYSQL_IP}:{MYSQL_PORT}/xxl_job?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&serverTimezone=UTC --spring.datasource.username={MYSQL_USER} --spring.datasource.password={MYSQL_PASSWD} --spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver" -p {XXL-JOB-ADMIN_SERVICE_PORT}:8080 -v /tmp/xxl-job:/data/applogs --name xxl-job -d xuxueli/xxl-job-admin:2.3.0...

饼图数据比例不一致时，展示有没有属性进行调整

3

饼图：https://infographic.antv.vision/examples/example?template=chart-pie-compact-card 数据较小时，容易出现重叠问题，这块有什么属性值能调整相对偏移吗