CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API 자격 증명 노출 📝 개요 취약점 제목 : MailConfiguration API를 통한 SMTP 자격 증명 노출 제품 : ExaGrid EX10 백업 어플라이언스 영향을 받는 버전 : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 심각도 : 높음 공격 경로 : 원격 인증됨 영향 : 정보 노출 – 평문 SMTP 자격 증명 🧨 설명 ExaGrid EX10 어플라이언스의 MailConfiguration API 엔드포인트 에...

fusionpbx_rce_vulnerability

Прелюдия Этот простой код пытается завершить реализацию цепочки уязвимостей, представленной Дастином Коббом в статье RCE через Caller ID – множественные уязвимости в FusionPBX. RCE Шаги воспроизведения 1. Откройте уязвимый экран оператора в веб-браузере, расположенный в данном примере по адресу...

CVE-2024-53900

CVE-2024-53900 - Уязвимость удаленного выполнения кода в Mongoose populate.match $where Этот репозиторий предоставляет воспроизводимую уязвимую среду и PoC для CVE-2024-53900 — критической уязвимости удаленного выполнения кода RCE в Mongoose версии 8.8.3. 📌 Детали уязвимости CVE : CVE-2024-53900...

CVE-2025-59470-PostgreSQL-Command-Injection

Затронутое программное обеспечение: PostgreSQL 15.x до 15.7, 16.x до 16.3. Тип уязвимости: Внедрение команд в расширении pgbackup. Описание: Расширение pgbackup не обеспечивает надлежащую санитизацию предоставляемых пользователем параметров, что позволяет оператору резервного копирования внедрять...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: flyway, logstash, apache-nifi, druid, apache-tika, keycloak, sonarqube, wildfly, apicurio-registry, cass-config-builder, akhq, scala, trino, tez, infinispan, apache-nifi-registry, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator, gradle,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: flyway, logstash, apache-nifi, druid, apache-tika, keycloak, sonarqube, wildfly, apicurio-registry, cass-config-builder, akhq, scala, trino, tez, infinispan, apache-nifi-registry, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator, gradle,...

PT-2026-104557

Dell's CSM advisory has two 10.0 flaws among 13. The "root on nodes" one is a 9.9 needing low privileges 2 of 13. Dell advisory DSA-2026-448 lists 37 CVEs: 13 in Dell's own code, two scored 10.0 and six scored 9.6 or more. Workarounds: "None". Fix: version 1.18.0 or later. The headline pairing,...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: metabase, flyway-fips, hadoop-client-modules, solr, automq-fips, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, sonarqube, cassandra, drain-cleaner, kayenta-fips, apache-pulsar, kafka-bridge-fips, s3proxy-fips,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: metabase, flyway-fips, hadoop-client-modules, solr, automq-fips, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, sonarqube, cassandra, drain-cleaner, kayenta-fips, apache-pulsar, kafka-bridge-fips, s3proxy-fips,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: s3proxy, metabase, flyway-fips, hadoop-client-modules, solr, automq-fips, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, sonarqube, cassandra, drain-cleaner, kayenta-fips, apache-pulsar, kafka-bridge-fips,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: s3proxy, metabase, flyway-fips, hadoop-client-modules, solr, automq-fips, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, sonarqube, cassandra, drain-cleaner, kayenta-fips, apache-pulsar, kafka-bridge-fips,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: logstash, druid, thingsboard, sonarqube, management-api-for-apache-cassandra-5.0, celeborn, cassandra, wildfly, cassandra-reaper, wavefront-proxy, cass-config-builder, akhq, tez, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: cilium, hubble-ui, kubescape-operator, hubble, kubescape...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: helm-set-status, helm-push, gitness, manifest-tool, k9s, cluster-api-helm-controller, kargo, kyverno-notation-aws, opentofu, xeol, cert-manager-cmctl, k8sgpt, kube-arangodb, flux-helm-controller, tigera-operator, rancher-helm, maru, helm-mapkubeapis...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: helm-set-status, helm-push, gitness, manifest-tool, k9s, cluster-api-helm-controller, kargo, kyverno-notation-aws, opentofu, xeol, cert-manager-cmctl, k8sgpt, kube-arangodb, flux-helm-controller, tigera-operator, rancher-helm, maru, helm-mapkubeapis...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: zot, k9s, xeol, kargo, helm-operator, kaniko, neuvector-scanner, steampipe, docker-cli-buildx, headlamp, helm-push, chartmuseum, nerdctl, dagger, cluster-api-helm-controller, trivy, k3s, k8sgpt, scorecard, helm-set-status, falco-no-driver, trivy-operator, docker,...