infosec-notebook

infosec-notebook Personal cybersecurity notes and references...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, nri-mysql, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, wuzz, goreleaser, crossplane-provider-keycloak,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, step-issuer, verticadb-operator, kwok, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, kubernetes-csi-driver-nfs, newrelic-fluent-bit-output, rclone, crossplane-provider-azure-storage, azure-service-operator, prometheus,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, step-issuer, verticadb-operator, kwok, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, kubernetes-csi-driver-nfs, newrelic-fluent-bit-output, rclone, crossplane-provider-azure-storage, azure-service-operator, prometheus,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, teleport-operator-fips, argo-cd, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator, kubescape, kubernetes-event-exporter-fips, consul-fips, tigera-operator-fips, azuredisk-csi-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, argo-cd, gomplate-fips, kubescape, consul-fips, tigera-operator-fips, azuredisk-csi-fips, commercial-grafana, external-secrets-operator, knative-operator, filebrowser, kyverno-fips, newrelic-infrastructure-agent, helm-exporter, mailpit-fips, atla...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, teleport-operator-fips, argo-cd, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator, kubescape, kubernetes-event-exporter-fips, consul-fips, tigera-operator-fips, azuredisk-csi-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, argo-cd, gomplate-fips, kubescape, consul-fips, tigera-operator-fips, azuredisk-csi-fips, commercial-grafana, external-secrets-operator, knative-operator, filebrowser, kyverno-fips, newrelic-infrastructure-agent, helm-exporter, mailpit-fips, atla...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, http-echo, xcover, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, hello-world-golang, k6-operator, kubescape, kubernetes-event-exporter-fips, azuredisk-csi-fips, fzf, nri-mssql, sbom-convert,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, http-echo, xcover, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, hello-world-golang, k6-operator, kubescape, kubernetes-event-exporter-fips, azuredisk-csi-fips, fzf, nri-mssql, sbom-convert,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

Summary A path traversal vulnerability Zip Slip exists in the media archive import feature. An authenticated user with owner-level privileges can craft a malicious ZIP file with directory-traversal filenames to write arbitrary files outside the intended temporary extraction directory on the...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-operator-fips, virt-launcher, virt-handler, docker-machine-driver-harvester...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-operator-fips, virt-launcher, virt-handler, docker-machine-driver-harvester...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: virt-controller-fips, virt-operator-fips, virt-launcher, virt-handler, docker-machine-driver-harvester...

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

Arcane code issues and vulnerabilities

Arcane is an open-source Docker management software developed by Arcane. Versions of Arcane prior to 1.17.3 contained code vulnerabilities. These vulnerabilities stemmed from the /api/templates/fetch endpoint, which accepted URL parameters provided by callers and processed HTTP GET requests witho...