Malicious code in solaan-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/solaan-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

certighost-cve-2026-54121-slides

Certighost Slidev-Deck Dieses Verzeichnis enthält die Slidev-Präsentation für CVE-2026-54121.md. npm install npm run dev Weitere Befehle: npm run build npm run export Das Quell-Deck ist slides.md. Das deckweite Styling befindet sich in style.css, und die Mermaid-Einstellungen befinden sich in...

CVE-2026-43499-so-build

Questo repository non contiene un README...

cve-2016-10033-45

Per buildare i docker: $ sudo docker build . -t ep4/5.2.17 sostituisci 5.2.17 con 18 e 20. per eseguire i docker: $ sudo docker run -p 7001:80 ep4/5.2.17 sostituisci con 7001/7002/7003 e 5.2.17/18/20 nelle rispettive cartelle...

CVE-2022-0847-Dirty-Pipe

CVE-2022-0847 Dirty Pipe Exploit precompilato per CVE-2022-0847 Dirty Pipe. Codice sorgente originale da haxx.in/dirtypipe. Compilazione make compilazione statica con glibc make zig-musl-static ZIGTARGET=x8664-linux-musl compilazione statica con musl Download Scarica i binari precompilati da...

CVE-2026-75604

A flaw was found in Next.js. When running on Windows systems, the application fails to properly sanitize backslashes in request paths before building file cache locations. An unauthenticated remote attacker can exploit this directory traversal weakness by submitting crafted requests to access...

OpenSC

Documentazione di OpenSC La wiki è disponibile online Prima di provare a usare OpenSC, dai un'occhiata alla documentazione. Stato di compilazione e test delle carte specifiche: Carte| Stato ---|--- CAC| Coolkey|...

PT-2026-104811

Heym before v0.0.112 contains a token leakage vulnerability in build public base url that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to...

CVE-2026-93326: Incorrect Behavior Order: Validate Before Canonicalize

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

CVE-2026-93318: Improper Validation of Integrity Check Value

A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actual layer contents. If a BuildKit daemon with...

CVE-2026-93317: Improper Validation of Integrity Check Value

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

PT-2026-106259

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may lead to the cleanup process blocking, operating...

PT-2026-106233

Name of the Vulnerable Software and Affected Versions Langflow versions 1.0.0 through 1.10.0 Description Langflow fails to verify flow ownership in the deprecated 'POST /api/v1/build/flow id/vertices' and 'POST /api/v1/build/flow id/vertices/vertex id' endpoints. In versions prior to 1.7.2, these...

PT-2026-106063

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

PT-2026-106231

Name of the Vulnerable Software and Affected Versions Quay affected versions not specified Description An issue exists when handling build trigger requests where the application incorrectly exposes trigger configuration details. This exposure includes repository write tokens, which can be accesse...

CVE-2023-20052

Exploit CVE-2023-20052 - Build Corretta Build Docker corretta per CVE-2023-20052 vulnerabilità XXE di ClamAV che compila davvero. Cosa era rotto L'exploit originale non riesce a compilare sui sistemi moderni: ❌ Errori di compatibilità con OpenSSL 3.0 ❌ Errori di tipo incompleto della struct HMACC...

cve-2024-3094

🛡️ Progetto di Cybersecurity: Analisi della Backdoor XZ in liblzma 📄 Panoramica Questo progetto analizza la backdoor di alto profilo scoperta in xz-utils liblzma , che interessa le versioni 5.6.0 e 5.6.1. Il codice dannoso introdotto nel sistema di build upstream prendeva di mira l'autenticazione...

CVE-2026-105137

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...

CVE-2026-105137

A vulnerability exists in Laradock (versions up to 20.4 ) within the Build Process component. Specifically, an unknown function in the workspace/Dockerfile allows for the download of code without integrity checks . This flaw can be exploited remotely with high complexity, and public exploit code ...

CVE-2026-105137 Laradock Build Process Dockerfile code download

A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...