CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, ucd, amazon-k8s-cni-fips, custom-pod-autoscaler, wireguard-go, net-kourier-fips, prometheus-stackdriver-exporter, yunikorn-web, yunikorn-k8shim, crossplane-function-environment-configs, harbor-registry-fips, hey, vendir, wave,...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

Exploit for Use After Free in Redis

CVE-2025-49844 My personal proof-of-concept for CVE-2025-498...

EUVD-2024-55054

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input by an authenticated administrator enables shell metacharacter injection that is incorporated into backend command invocations, allowing arbitrary com...

GO-2025-4077 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.2, which stems from insufficient...

PT-2025-44504

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2 Description Nagios XI versions prior to 2024R1.2 have a command injection issue in the Docker Wizard. A lack of proper input validation allows a user with administrator privileges to inject shell...

Exploit for CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A...

SUSE CVE-2025-62725

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker-supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...