cnappgoat

CNAPPgoat CNAPPgoat는 다중 클라우드 환경에서 의도적으로 취약하게 설계된 인프라를 배포하는 도구입니다. 방어자와 침투 테스터를 위한 실습 환경을 제공하는 데 특화되어 있으며, 주요 기능은 여러 클라우드 서비스 제공업체에 걸쳐 의도적으로 취약한 환경을 배포하여 취약점을 악용, 탐지, 예방하는 능력을 향상시키는 데 도움을 주는 것입니다. 경고 : CNAPPgoat는 취약한 환경을 배포합니다. 안전하고 통제된 샌드박스 내에서만 사용하세요. 시작하기 CNAPPgoat는 CLICommand Line Interface 도구...

TerraformGoat

TerraformGoat English | 中文 TerraformGoat는 HXSecurity 연구소의 "Vulnerable by Design" 멀티 클라우드 배포 도구입니다. 현재 지원되는 클라우드 벤더로는 Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure가 있습니다. 🎯 시나리오 💫 설치 TerraformGoat는 Docker 이미지를 사용하여 배포되므로 Docker Engine 환경 지원...

cdt-samba-deploy

cdt-samba-deploy Playbook Ansible CDT per distribuire la CVE-2017-7494, nota anche come "SambaCry", su una macchina Ubuntu...

@abuiles/vite-plugin (>=1.8.0, <=1.10.0), @anyauth/design-system (>=0.5.0, <=0.5.1) +24 more potentially affected by CVE-2026-0933 via wrangler (>=4.0.0, <=4.59.0)

wrangler NPM version =4.0.0, =1.8.0, =0.5.0, =12.6.6, =0.1.11, =0.8.0, =0.2.0, =0.0.0, =0.0.0-snapshot-001db2706f44e8ac35b9064bbbc2b6f14b577447, =1.0.6, =0.0.0-5788407, =0.0.25, =0.16.0, =1.0.0, =1.1.3 and more Source cves: CVE-2026-0933 Source advisory: SNYK:JS-WRANGLER-15046269...

Microsoft Office 代码问题漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A code issue vulnerability exists in Microsoft Office. An attacker exploiting this...

omni 信息泄露漏洞

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. An information disclosure vulnerability exists in omni versions prior to 1.1.5 and prior to 1.0.2, which stems from an API that may disclose sensitive information...

Omni 安全漏洞

omni is a Kubernetes deployment tool open-sourced by Sidero Labs, Inc. A security vulnerability exists in Omni versions prior to 1.1.5 and prior to 1.0.2, which stems from the isSensitiveSpec function not checking if the metadata field of resource is null, which could lead to null pointer...

extloader

extLoader A small toolkit for managing and deploying unpacked...

executorch 安全漏洞

executorch is a PyTorch deployment tool from pytorch open source. A security vulnerability exists in executorch that stems from a heap buffer overflow when loading ExecuTorch methods, which could lead to code execution...

ROS-20250424-12

A vulnerability in the eval function of the Cloud Deployment and Query Tool modules of the database management tool pgAdmin 4 is related to incorrect code generation control when processing endpoints /sqleditor/querytool/download and /cloud/deploy with querycommitted and highavailability...

Octopus Server 安全漏洞

Octopus Server is a deployment automation and release management tool for continuous delivery from Octopus Australia. A security vulnerability exists in Octopus Server that stems from a cookie using the wrong expiration time...

The vulnerability of the Command Line Interface (CLI) of the deployment and application management automation tool in Docker-enabled environments allows a attacker to obtain arbitrary credentials.

The vulnerability of the Command Line Interface CLI of the deployment and application management tool in Docker-enabled environments is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain arbitrary user...

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to uncontrolled resource consumption, allows a malicious actor to trigger service failures.

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

Design/Logic Flaw

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to a Cross‑Site Scripting (XSS) vulnerability in the Deployment tool (Add Agent/Proxy). The issue affects Nagios XI deployments prior to 5.7.5 and is described across multiple sources (CVE-2020-27990; CNVD-2020-63972). Root cause and exact exploit details are ...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool add agent...

wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)

It was found that the explode function of the deployment utility in jboss-cli and console that allows extraction of files from an archive does not perform necessary validation for directory traversal. This can lead to remote code execution...

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool allows a attacker to execute arbitrary code.

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ceph-deploy admin command copies keyring file to /etc/ceph which is world readable

It was discovered that ceph-deploy, a utility for deploying Red Hat Ceph Storage, would create the keyring file with world readable permissions, which could possibly allow a local user to obtain authentication credentials from the keyring file...