EUVD-2017-18214

Malware in sbrugna...

Oracle E-Business Suite CVE-2025-61882 RCE

This module exploits CVE-2025-61882 in Oracle E-Business Suite by combining SSRF, Path Traversal, HTTP request smuggling and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to RCE. This module provides an interactive shell session. Vulnerable...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: ferretdb, k8sgpt, flux-source-controller, pombump, neuvector-dbgen, grafana-mimir, age, kyverno-policy-reporter-kyverno-plugin, timestamp-authority, nri-apache, fulcio, wire-go, paranoia, dive, sbomqs, trillian, aws-load-balancer-controller, trivy, q, minify,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, direnv, ferretdb, hello-world-golang, k8sgpt, newrelic-infra-operator, nuclei, grpcurl, pombump, govulncheck, protoc-gen-go-grpc, bazelisk, kube-logging-operator, hey, secrets-store-csi-driver-provider-aws,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, direnv, ferretdb, hello-world-golang, k8sgpt, newrelic-infra-operator, nuclei, grpcurl, pombump, govulncheck, protoc-gen-go-grpc, bazelisk, kube-logging-operator, hey, secrets-store-csi-driver-provider-aws,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubernetes, aws-efs-csi-driver, kubernetes-dns-node-cache, nodetaint, spark-operator, argocd-image-updater, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, kubernetes, aws-efs-csi-driver, kubernetes-dns-node-cache, nodetaint, spark-operator, argocd-image-updater, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, ferretdb, k8sgpt, kubeflow, newrelic-infra-operator, skopeo, flux-source-controller, nuclei, grpcurl, atlantis, protoc-gen-go-grpc, kube-logging-operator, sigstore-scaffolding, secrets-store-csi-driver-provider-aws,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, prometheus-operator, conftest, bank-vaults, docker-compose, kubernetes-csi-livenessprobe-fips, kube-logging-logging-operator, osv-scanner, prometheus-pushgateway-fips, minio-fips, gcsfuse, grafana-operator, certificate-transparency-fips...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, direnv, ferretdb, hello-world-golang, k8sgpt, newrelic-infra-operator, nuclei, grpcurl, pombump, govulncheck, protoc-gen-go-grpc, bazelisk, kube-logging-operator, hey, secrets-store-csi-driver-provider-aws,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: ctop, nri-discovery-kubernetes, prometheus-beat-exporter-fips, k3d, slsa-verifier, amass, scorecard, go-md2man, jsonnet-bundler, sbom-scorecard, docker-cli, gosu, cortex, gobuster, hubble-ui, go-bindata, aws-flb-firehose, bank-vaults-fips, docker-credential-ecr-login...

ebs-bortolazzi.com Improper Access Control vulnerability OBB-3798810

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, prometheus-adapter, kubernetes-dns-node-cache, spark-operator, ip-masq-agent...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, nodetaint...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, prometheus-adapter, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache, nodetaint...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, prometheus-adapter, kubernetes-dns-node-cache, spark-operator, ip-masq-agent...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: temporal, volume-modifier-for-k8s, kubernetes, temporal-server, cri-tools, kubescape, envoy-ratelimit, kine, k3s, docker-compose, buildkitd, kubernetes-csi-external-resizer, kubevela, metrics-server...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, k3d, slsa-verifier, kiam, prometheus-blackbox-exporter, scorecard, terraform-provider-sendgrid, kube-oidc-proxy, kubeflow-fips, cortex, buildkitd, timestamp-authority-fips, kubernetes-csi-livenessprobe-fips, src, conftest-fips, kubevela,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-source-controller, node-problem-detector, prometheus-postgres-exporter-fips, cosign, vault-k8s, kiam, cue, kubewatch, prometheus-operator, pulumi, tekton-chains, crossplane-provider-aws, atlantis-fips, k8sgpt-operator, prometheus-pushgateway, bank-vaults,...