capsule

Capsule Pour commencer • Documentation • Problèmes • Contribuer Aperçu Capsule est un runtime pour exécuter du code non fiable dans des environnements isolés. Chaque tâche s'exécute dans son propre bac à sable WebAssembly, offrant : Exécution isolée : chaque tâche s'exécute isolée de votre systèm...

WPTimeCapsulePOC

Backup and Staging by WP Time Capsule 1.21.16 - 인증 우회 개념 증명 WP Time Capsule 1.21.16에서 인증 우회Authentication Bypass 취약점이 최근 발견되었습니다 https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/. 이 PoC는 해당 문제가 어떻게 동작하며 어떻게 악용될 수 있는지를 증명합니다. The PoC 이 PoC는 두 가지 옵션을 제공합니다: 사례 1: 관리자 쿠...

BIT-ENVOY-2026-73512 Envoy: use-after-free in QUIC on internal redirects

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule 플러그인 임의 파일 업로드 취약점 개요 CVE-2024-8856는 WordPress용 WP Time Capsule 플러그인에서 발견된 보안 취약점으로, 인증되지 않은 사용자가 서버에 임의의 파일을 업로드할 수 있습니다. 이는 업로드된 파일이 서버에서 실행될 경우 원격 코드 실행으로 이어질 수 있습니다. 이 취약점은 불충분한 파일 검증으로 인해 발생하며, 취약한 엔드포인트에 특수하게 조작된 요청을 전송하여 악용할 수 있습니다. 영향을 받는 버전 WP Tim...

GO-2026-6521 Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic in github.com/projectcapsule/capsule

Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic in github.com/projectcapsule/capsule...

GO-2026-6520 Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule

Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule...

GO-2026-6519 Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule

Capsule: hostnameRegexHandler.OnUpdate validates stale old Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation in github.com/projectcapsule/capsule...

CVE-2024-8856

CVE-2024-8856 이 도구는 WP Time Capsule 플러그인의 CVE-2024-8856 관련 취약점을 검사하기 위해 WordPress 웹사이트를 스캔합니다. "1.22.22" 미만의 플러그인 버전을 취약한 것으로 식별하고 결과를 "vuln.txt"에 기록합니다. 간단하고 효율적이며, 보안 연구자와 관리자가 위험을 신속하게 탐지하고 해결하는 데 도움을 줍니다. 기능 CVE-2024-8856과 관련된 WP Time Capsule 플러그인의 취약점을 탐지하기 위해 URL 목록을 스캔합니다. 플러그인 버전이 1.22.22...

SUSE CVE-2026-73512

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73512

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73512

CVE-2026-73512 is a use-after-free in Envoy Proxy 's HttpDatagramHandler (QUIC/HTTP3 datagram handling). When Capsule Protocol is enabled, the handler caches the current RequestDecoder pointer. During stream recreation—such as an internal redirect —the ActiveStream is replaced and EnvoyQuicServer...

EUVD-2026-84113

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73512 Envoy: use-after-free in QUIC on internal redirects

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73512: Use After Free

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-61794

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:21+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-gxjc-74v5-3vx3...

CVE-2026-61672

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:19+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-gjw4-3v3v-rqxg 2026-09-18 23:05:36+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117294545933591735...

CVE-2026-61795

creationtimestamp| type| source ---|---|--- 2026-09-18 18:35:17+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-f94q-w3w8-cj67 2026-09-26 19:14:15+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117338919342263826 2026-09-26...

CVE-2026-61794

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validation/forbiddenannotationsregex.go compiles ForbiddenLabels.Regex for both the labels and annotations checks instead of validating...

CVE-2026-61795

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/validation/hostnameregex.go reverses the new and old Tenant parameters and validates the previous AllowedHostnames.Regex instead of the submitte...

CVE-2026-61672

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbiddenlist.go sorts denied metadata keys case-insensitively and then uses sort.SearchStrings, which assumes byte-order sorting. When an administrator's forbidden list...