future-architect/
Vulnerability scanner for Linux/FreeBSD, agentless, written in Go
USD raised
Recent activities
SECURITY: New CVEs this week - add detection rules
Security: Vulnerability remediation request for Go dependencies and Go runtime (x/crypto, x/net, Â Â x/sys, stdlib)
SrcPackages collapses multiple source versions of one source package, causing false negatives/positives
[feature] mcp and to agentic tools mode
checkrestart in debian 13 trixie misreports deleted files causing the vuls function to fail
Update packageurl-go to v0.1.6 (or not)
Concurrency issue in boltdb handling
macOS scanning via CPE-only detection produces near 100% false positives - is this expected or am I missing configuration?
Move S3, Azure Blob, and Slack reporters to contrib/ as separate modules
Remove WPScan API vulnerability detection (detector/wordpress.go)
fix: merge go.sum into go.mod for Go <1.17 projects
Question: Inconsistent CPE handling across FilterUnfixed / PatchStatus / FormatFixedStatus
scanner cannot manage same-named packages across different architectures or versions
Vuls Server Support for Network Devices
failed to scan lockfile in windows server
Support for Slackware Linux
failed to link process and package (needs-restarting)
Unable to scan and get the report for Oracle Linux server
False Positives in SUSE 12 SP3 Teradata kernels
Collection of licenses of installed packages
[Feature] Support for flatpak and snap
False Positives in Redhat 8.6 EUS
failed to collect modularitylabel
Support for Gentoo Linux
false positive redhat unpatched vulnerability
How to remove password from the logs ?
"Operation not permitted" error while scanning installed packages in MacOS
CVE-2022-3602 false positive on openssl 3.0.9-1
reporting error fixedIn for amazon linux 2023
amazon linux 2022 is identified as amazon linux 2
symlink - current
request: more BOM sources and general CVE scans
Add total summary line at the start/end One Line Summary
Sigma rules feed..
NVD will retire its legacy data feeds by September 2023
vuls discover CIDR
Unable to upgrade vuls
Potentially bad TLS connection settings
Failed to NewDB. Since SchemaVersion is incompatible, delete Database and fetch again
Fast scan always failed on RedHat8
Vuls/VulsRepo reporting vulnerabilities that are not on the machine
vuls report -to-localfile not writing
"user" keyword not working in config.toml
Support for Kali based systems
detector.goCveDictClient.fetchCveDetails errors out with too many SQL variables;
Add trickest/cve as a data source for PoC
Failed to check EOL for alpine linux
Support for OSX using command line tools and curl
Add extra flags for external port scanner (nmap)
In WordPress, `vuls report -ignore-unfixed' can't report fixed pkgs .
Vuls vulnerability database upgrade stability and expansion
Support Amazon linux 22
Run command "vuls flags -v" cannot get vuls version
Empty CVE list
False positives, when OS version does not match
DockerHub Automated Builds not working
Add SBOM to binaries
ignore CVEs by pattern-matching in Summary field
server mode doesn't use `default` section ignoreCves/ignorePkgsRegexp
reporting to Google Chat
FreeBSD 13.0 EOL
Using Vuls with a package list
FP CVE-2011-4862
Error in SSH command
Scan OpenWRT-based devices (opkg packages) for vulnerabilities
Add -format-one-http-message option
Unsupported protocol scheme at http reports
trivy-to-vuls doesn't support latest trivy results
jvndb cannot be updated normally from 2021/02/26
I got a error output as the description when running the scan.sh
Integrate with Ansible
Failed to execute tui with "panic: runtime error"
Mail is delivered to To, but mail to Cc is not delivered.
Vuls stop scanning on error with containers !
Scan returns 0 packages installed
Release v0.15.0 ???
The documentation is inaccurate about Fetch OVAL(redhat)
[Feature] Prestashop 1.7.x
security in docker : use an applicative user instead of root to run vuls server
freetaxii client
Impossible to scan a DEBIAN 8
Result as metrics to be able to push to Prometheus
CPE report is not working
'.vuls' directory as XDG_CACHE_HOME
CPE update failed
Library (non-OS) Scan Submitted to Vuls in Server Mode Misses Affected Packages
Support for ubuntu based distribs
vuls/vuls:latest (>0.9.2 db9efcc67b00) : json payload changed in response - notFixedYet field becomes optional
[Apr 9 01:21:57] ERROR [localhost] Failed to init servers. err: No scannable base servers:
Panic if no permissions in log directory
Allow printing out report from (curl) one-liner scan with vuls (without need of vulnerabilityDBs)
False negatives by Vuls
Show the public risk, exploit url and mitigation of detected CVEs in US-CERT
Show the skill level to exploit of detected CVEs
Unify reporting or add different reports for email
Specify VOLUME using json syntax
bug(report): Failed to report with CPEName: `cpe:/a:cisco:ios:15.2%282%29eb`
0 CVEs are detected with cve.sqlite3
Report flags to manage content (to-slack)
Fix/upgrade slack.go or pin nlopes/slack to 0.4.0
feat(scan): WordPress Vulnerability Scan (core, plugin, theme)
feat(report): CERT notification to slack
Doc request: add docs related to contributing code
Results current directory is a broken link
Need help: manually define what is missing in the pair of USCERT/PJCERT alert and CVE-ID
Make it easy to deploy to kubernetes
issue after the change in json format and keys
Common SIEM/Logging support.
Support email one-line format
New feature
pull request to add SLES variant OS SLES_SAP support
Enable to define cpeURIs for each container in config.toml
Enable to define ignoreCves for each container in config.toml
Š 2019 BoostIO, Inc.
IssueHunt
