Vvveb Access Control Vulnerability

Vvveb is a powerful and easy-to-use CMS developed by Givan’s individual developers. It is used to build websites, blogs, or e-commerce stores. Versions of Vvveb prior to 1.0.8.2 contained an access control vulnerability. This vulnerability stemmed from hard-coded credentials in the...

CVE-2026-41930: Missing Authentication for Critical Function

Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to access the bundled phpMyAdmin container with pre-configured database credentials. Attackers can connect to the phpMyAdmin port to...

PT-2026-38219

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.2 Description A hard-coded credentials issue exists in the docker-compose-apache.yaml configuration. This allows unauthenticated attackers to access the bundled phpMyAdmin container using pre-configured database...

unicas_docker_exploit

Cyber-Range Didattico in Docker / Educational Docker Cyber-Ran...

CVE-2026-41167

Jellystat prior to 1.1.10 exposes SQL injection via POST /api/getUserDetails and POST /api/getLibrary, where unsanitized request-body fields are interpolated into raw SQL. This allows an authenticated user to read any table (including app_config) and, due to node-postgres simple query usage, enab...

CVE-2026-41167 Jellystat has SQL Injection that leads to to Remote Code Execution

Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, multiple API endpoints in Jellystat build SQL queries by interpolating unsanitized request-body fields directly into raw SQL strings. An authenticated user can inject arbitrary SQL via POST /api/getUserDetai...

GRC-demo-poc-oscal

GRC-OSCAL — continuous compliance, demonstrated A working pro...

AZL-85640 CVE-2026-35469 affecting package docker-compose for versions less than 2.27.0-11

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...

SUSE: Security Advisory (SUSE-SU-2026:20976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2026:20976-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

SUSE-SU-2026:20949-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: conftest, zot, trivy, docker-cli-buildx, kaniko, kubescape, guac, scorecard, osv-scanner, buildah, podman, trivy-operator, docker-compose, skaffold...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: conftest, zot, trivy, docker-cli-buildx, kaniko, kubescape, guac, scorecard, osv-scanner, buildah, podman, trivy-operator, docker-compose, skaffold...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: conftest, zot, trivy, docker-cli-buildx, kaniko, kubescape, guac, scorecard, osv-scanner, buildah, podman, trivy-operator, docker-compose, skaffold...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: conftest, zot, trivy, docker-cli-buildx, kaniko, kubescape, guac, scorecard, osv-scanner, buildah, podman, trivy-operator, docker-compose, skaffold...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: skaffold, podman, buildah-fips, kubescape, scorecard, osv-scanner, trivy-fips, livekit-cli, kaniko, buildah, kaniko-fips, cloudbeat-fips, docker-compose-fips, conftest-fips, trivy-operator, trivy, skaffold-fips, podman-fips, docker-compose, kubescape-server,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: skaffold, podman, buildah-fips, kubescape, scorecard, osv-scanner, trivy-fips, livekit-cli, kaniko, buildah, kaniko-fips, cloudbeat-fips, docker-compose-fips, conftest-fips, trivy-operator, trivy, skaffold-fips, podman-fips, docker-compose, kubescape-server,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: skaffold, podman, buildah-fips, kubescape, scorecard, osv-scanner, trivy-fips, livekit-cli, kaniko, buildah, kaniko-fips, cloudbeat-fips, docker-compose-fips, conftest-fips, trivy-operator, trivy, skaffold-fips, podman-fips, docker-compose, kubescape-server,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: skaffold, podman, buildah-fips, kubescape, scorecard, osv-scanner, trivy-fips, livekit-cli, kaniko, buildah, kaniko-fips, cloudbeat-fips, docker-compose-fips, conftest-fips, trivy-operator, trivy, skaffold-fips, podman-fips, docker-compose, kubescape-server,...

SUSE-SU-2026:20871-1 Security update for docker-compose

This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files bsc1252752...