EUVD-2026-116554

Tanium addressed a heap-based buffer overflow vulnerability in Deploy...

CVE-2026-120775

Tanium addressed a heap-based buffer overflow vulnerability in Deploy...

CVE-2026-120775 Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

Tanium addressed a heap-based buffer overflow vulnerability in Deploy...

CVE-2026-120775

Tanium addressed a heap-based buffer overflow vulnerability (CWE-122) in its Deploy component. The vulnerability has a CVSS 3.1 base score of 7.2 (HIGH) , indicating that an attacker with high privileges could potentially impact confidentiality, integrity, and availability . No specific exploit i...

CVE-2026-120775: Tanium Deploy: Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

Tanium addressed a heap-based buffer overflow vulnerability in Deploy...

deploy-goad

Deploy GOAD v2 on Ubuntu Linux 22.04 This script streamlines the prerequisites needed when deploying the Active Directory lab provided by https://github.com/Orange-Cyberdefense/GOAD High level description Ensure computer has VTx extensions enabled in BIOS Install Ubuntu Server 22.04 Configure...

cdt-samba-deploy

cdt-samba-deploy CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box...

egg-scripts-CVE-2018-3786

egg-scripts deploy tool for egg project. Note: Windows is partially supported, see22 Install $ npm i egg-scripts --save Usage Add eggctl to package.json scripts: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Then run as: npm start npm stop Note: egg-scripts is not recommended...

CVE-2018-11788

Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...

pgAdminOpendoor

pgAdminOpendoor CVE-2025-2945 Overview This is my research on CVE-2025-2945. This repo includes a test stand with postgress and vulnerable pgadmin, and exploit. CVE Usefull links: NVD Details WIZ Analyze Metasploit Breakdown In pgAdmin backend, which is written in python, there are two endpoint...

nimbostratus-target

Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...

Malware in wrangler-deploy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-119547

A flaw was found in Forgejo. The GetPublicKey Application Programming Interface API handler does not enforce ownership checks during key lookups. An authenticated remote attacker with read access can exploit this flaw by enumerating sequential key identifiers, resulting in information disclosure ...

CVE-2026-119547: forgejo: Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure…

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerability in the GetPublicKey API handler that lacks an ownership check on key lookups. Authenticated users with a read:user token or session can enumerate sequential key IDs to obtain...

LangGraph CLI Prints The Registry Push Token In `langgraph Deploy --verbose` Output

Summary "langgraph deploy --verbose" printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, "langgraph deplo...

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

Summary langgraph deploy --verbose printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, langgraph deploy...

flatpak security update

1.12.9-4.6 - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272190 1.12.9-4.5 - Avoid path traversal deletion via deploy export/bin CVE-2026-97023 Resolves: RHEL-272030...

flatpak security update

1.12.9-9 - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272181 1.12.9-8 - Avoid path traversal deletion via deploy export/bin CVE-2026-97023 Resolves: RHEL-272023...

CVE-2026-116068

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to...