403 matches found
MAL-015
MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...
CVE-2021-20253
CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...
adguard-home-agent (>=0.2.15, <=0.15.0), agent-utilities (>=3.0.0, <=3.2.0) +88 more potentially affected by CVE-2026-114386 via pydantic-ai-harness (>=0.1.2, <=0.58.0)
pydantic-ai-harness PYPI version =0.1.2, =0.2.15, =3.0.0, =2.7.0, =1.3.15, =0.1.0, =0.4.0, =0.1.15, =0.1.0, =0.1.6, =0.6.16, =0.1.0, =0.30.0, =0.3.0, =0.1.0, =1.0.0, =2.0.1 and more Source cves: CVE-2026-114386 Source advisory: GHSA-3589-PXP7-3GJ8...
adguard-home-agent (>=0.2.15, <=0.15.0), agent-utilities (>=3.0.0, <=3.2.0) +88 more potentially affected by CVE-2026-114386 via pydantic-ai-harness (>=0.1.2, <=0.58.0)
pydantic-ai-harness PYPI version =0.1.2, =0.2.15, =3.0.0, =2.7.0, =1.3.15, =0.1.0, =0.4.0, =0.1.15, =0.1.0, =0.1.6, =0.6.16, =0.1.0, =0.30.0, =0.3.0, =0.1.0, =1.0.0, =2.0.1 and more Source cves: CVE-2026-114386 Source advisory: MEND:CVE-2026-114386...
Ansible Tower - Detect
Ansible Tower was detected. Ansible Tower is a commercial offering that helps teams manage complex multi-tier deployments by adding control, knowledge, and delegation to Ansible-powered environments. !/usr/bin/env python3 -- coding: utf-8 -- """Ansible Tower was detected.""" from kittysploit impo...
CVE-2026-16544 Awx: websocket eventconsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure
A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: kserve, py3-vllm-cuda-12.4, kubeflow-pipelines-visualization-server, checkov, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.11-sdk, airflow, py3-cassandra-medusa, dask-kubernetes, awx, request-1276, open-webui...
EUVD-2020-6449
Malware in sbrugna...
EUVD-2018-11749
Malware in sbrugna...
EUVD-2018-11751
Malware in sbrugna...
EUVD-2015-1616
Malware in sbrugna...
EUVD-2015-1507
Malware in sbrugna...
EUVD-2016-7950
Malware in sbrugna...
EUVD-2017-3732
Malware in sbrugna...
EUVD-2017-16544
Malware in sbrugna...
EUVD-2018-8669
Malware in sbrugna...
EUVD-2018-2948
Malware in sbrugna...