110475 matches found
Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation — Updated!
Incident Analysis: Check Point Security Gateway CVE-2024-24919 Exploitation Attempt 📌 Executive Summary On June 6, 2024, at 03:12 PM, security monitoring systems triggered an alert for a high-severity exploit attempt targeting a Check Point Security Gateway CP-Spark-Gateway-01, IP: 172.16.20.146...
Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
Summary An authenticated, non-admin user can obtain arbitrary host-filesystem read/write and host environment-secret disclosure on an Omnigent runner by uploading an agent bundle whose osenv.cwd points outside any intended workspace e.g. / or /home/. The cwd field is taken verbatim from the bundl...
EUVD-2026-64015
Omnigent: Unvalidated osenv.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENTRUNNERWORKSPACE...
Important: Red Hat Security Advisory: python3.12 security update
An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
GO-2026-6314 Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory in github.com/aquaproj/aqua
Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory in github.com/aquaproj/aqua...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the Allure report publishing process. An attacker can access arbitrary files on the Jenkins controller's file system by exploiting insufficient path validation when reading files. Details A Directory Traversal...
CVE-2026-75593
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially...
buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability
A flaw was found in BuildKit. A custom client with valid permissions to access the BuildKit control API can produce an upload request that allows files to escape from the BuildKit-controlled state directory. This could lead to unauthorized modification or disclosure of sensitive data...
CVE-2026-49831
CVE-2026-49831 is a Path Traversal vulnerability in the DSpace Curation Task feature. The curate script's reporter output path (-r parameter) is not restricted to a configured base directory, allowing any path writable by the DSpace (typically tomcat) user. An attacker with Collection/Community/S...
CVE-2026-49831 DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)
DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation...
EUVD-2026-70225
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
CVE-2026-84670
Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...
CVE-2026-84666
Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...
CVE-2026-84670
Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...
CVE-2026-84670
The Jenkins Performance Plugin (version 1015.v09ca_52b_3370e and earlier) is vulnerable to an arbitrary code execution attack due to an insecure deserialization flaw. The plugin uses Java serialization to cache performance reports in the build directory on the Jenkins controller but fails to rest...
EUVD-2026-70132
Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...
CVE-2026-84666
The Jenkins Job Configuration History Plugin (version 1367.vc8fa_b_15101dc and earlier) is vulnerable to improper input validation via Stapler data binding . The plugin's constructor used the @DataBoundConstructor annotation, which allowed the Stapler web framework to invoke @DataBoundSetter meth...