4365 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16 CNF vRAN extras topology aware lifecycle manager update
An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.16. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21 CNF vRAN extras topology aware lifecycle manager update
An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.21. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22 CNF vRAN extras topology aware lifecycle manager update
An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.22. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...
Malicious code in xeprews (npm)
The package xeprews impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exptrdd (npm)
The package exptrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17247 Malicious code in exptredd (npm)
The package exptredd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in react-nodejs (npm)
The package react-nodejs impersonates the legitimate 'react' package it republishes react's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exptredd (npm)
The package exptredd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exprdd (npm)
The package exprdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17241 Malicious code in exprdd (npm)
The package exprdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
CVE-2026-46590
CVE-2026-46590 — camel-pqc 鍵ライフサイクルにおける安全でないデシリアライゼーション 同じ Apache Camel の脆弱性に対する実行可能な概念実証（PoC）再現コードで、ランタイムごとに 1 つ用意しています： ランタイム| ディレクトリ| スタック ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-pqc 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel Quarkus...
CVE-2026-54686-poc
CVE-2026-54686: Warp DCS ライフサイクルフック偽装 PoC English version 概要 このリポジトリは、Warp の公開アドバイザリ GHSA-9w2v-jhww-vm85 に基づく CVE-2026-54686 の安全なローカル PoC です。 Warp の修正前バージョンは、PTY ストリームから届く一部の状態変更 DCS ライフサイクルフックについて、そのフックが現在のセッション用に Warp の シェル統合から送られたものかを検証していませんでした。攻撃者が被害者に 攻撃者制御の端末出力を Warp 上で表示させられる場合、選択されたライフ...
alibaba__one-java-agent_CVE-2022-25842_0-0-1
one-java-agent 目標 1. プラグイン化をサポートし、多数のJava Agentを統一的に管理する 2. プラグインはinstall/uninstallをサポートし、プラグイン側でインターフェースを実装する必要がある 3. 従来のjava agent、すなわち既に開発済みのjava agentをサポートする プラグインシステム プラグインがライフサイクルを認識したい場合は、PluginActivatorインターフェースを実装できます： public interface PluginActivator // プラグイン自体が起動するかどうかを判断させる boolean...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
CVE-2026-45321-Tanstack
サプライチェーン攻撃シミュレーション — CVE-2026-45321 TanStack npm サプライチェーン攻撃、CI/CD の悪用、インストール時コード実行を理解するための教育用ラボ 免責事項 このプロジェクトは以下の目的のみで作成されています: サイバーセキュリティの学習、 ディフェンシブセキュリティの研究、 ローカルラボでのシミュレーション、 サプライチェーン攻撃の概念の理解。 このプロジェクトを以下の目的で使用しないでください: 実在のシステムへの攻撃、 認証情報の窃取、 マルウェアの展開、 不正アクセス、 またはその他の違法行為。 説明...