297 matches found
vault-conductor
🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features It implements the SSH Agent Protocol as a Unix domain socket server, acting as a secure bridge between your SSH clients and...
opentaint
The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...
Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution
Orkes Conductor from 3.21.21 before 3.30.2 is vulnerable to unauthenticated remote code execution. The INLINE workflow task evaluates a user-supplied JavaScript expression in a GraalVM context created with HostAccess.ALL, so an unauthenticated attacker can reflect from the bound input object to...
CVE-2026-106122 vulnerabilities
Vulnerabilities for packages: druid, traccar, conductor-fips, thingsboard, conductor, traccar-fips, apache-nifi, nuxeo, cassandra-reaper, logstash...
CVE-2026-106123 vulnerabilities
Vulnerabilities for packages: druid, traccar, conductor-fips, thingsboard, conductor, traccar-fips, apache-nifi, nuxeo, cassandra-reaper, logstash...
GHSA-7822-RCF6-97FX vulnerabilities
Vulnerabilities for packages: druid, traccar, conductor-fips, thingsboard, conductor, traccar-fips, apache-nifi, nuxeo, cassandra-reaper, logstash...
GHSA-H6W7-QMCM-Q6XR vulnerabilities
Vulnerabilities for packages: druid, traccar, conductor-fips, thingsboard, conductor, traccar-fips, apache-nifi, nuxeo, cassandra-reaper, logstash...
CVE-2026-106121 vulnerabilities
Vulnerabilities for packages: druid, conductor-fips, thingsboard, conductor, cassandra-reaper, logstash...
GHSA-CQGH-8P3P-MX4M vulnerabilities
Vulnerabilities for packages: druid, conductor-fips, thingsboard, conductor, cassandra-reaper, logstash...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, traccar, knative-kafka-broker, datahub-gms, kafbat-ui-fips, dd-trace-java, datahub-frontend, conductor, traccar-fips, opensearch-fips, akhq, apache-pulsar-fips, flink-kubernetes-operator-fips, kayenta-fips, logstash, kafka, cassandra-fips,...
CVE-2026-106450 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, traccar, knative-kafka-broker, datahub-gms, kafbat-ui-fips, dd-trace-java, datahub-frontend, conductor, traccar-fips, opensearch-fips, akhq, apache-pulsar-fips, flink-kubernetes-operator-fips, kayenta-fips, logstash, kafka, cassandra-fips,...
GHSA-GM45-99XC-R7WV vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, traccar, knative-kafka-broker, datahub-gms, kafbat-ui-fips, dd-trace-java, datahub-frontend, conductor, traccar-fips, opensearch-fips, akhq, apache-pulsar-fips, flink-kubernetes-operator-fips, kayenta-fips, logstash, kafka, cassandra-fips,...
CVE-2026-58138
CVE-2026-58138 — Conductor Unauthenticated RCE via GraalVM Evaluator -critical TL;DR: Orkes/OSS Conductor versions 3.21.21 to 3.30.2 evaluates user-supplied JavaScript in INLINE tasks using a GraalVM context with full host access HostAccess.ALL. Because the community API has no authentication by...
CVE-2026-58138-Conductor-Unauth-RCE
CVE-2026-58138 — Conductor Unauthenticated RCE via INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … before 3.30.2 evaluates user-supplied JavaScript in INLINE and LAMBDA / DOWHILE / SWITCH tasks with a GraalVM context built with full host access HostAccess.ALL. The script reflects up to...
CVE-2026-58138
🚨 CVE-2026-58138 — 認証不要のリモートコード実行 🔥 Conductorにおける重大な認証不要のリモートコード実行 影響を受けるバージョン:3.21.21 → 3.30.2 📌 概要 CVE-2026-58138 は、Conductor / Orkes Conductor に影響を与える重大な認証不要のリモートコード実行（RCE） 脆弱性です。 この脆弱性は、GraalVM を介して評価されるユーザー制御のスクリプト式をアプリケーショ...
CVE-2026-58138
CVE-2026-58138 — Conductor 3.21.21.. 3.30.1| ❌ 패치됨 🚀 설치 저장소 복제 git clone https://github.com/0xgh057r3c0n/CVE-2026-58138.git cd CVE-2026-58138 스크립트 실행 권한 부여 chmod +x CVE-2026-58138.py 설치 확인 python3 CVE-2026-58138.py --help 💻 사용법 기본 사용법 python3 CVE-2026-58138.py http://target:808...
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 CVSS v3.1 score: 9.8/CVSS v4 score: 9.3, which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21...
CVE-2026-68525 vulnerabilities
Vulnerabilities for packages: conductor-fips, nacos, nacos-docker, thingsboard, kayenta, camunda-zeebe, conductor, kayenta-fips, ontop, camunda, ontop-fips...