2752 matches found
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
CVE-2026-49975-HTTP-2-Bomb
A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...
GO-2026-6859 vulnerabilities
Vulnerabilities for packages: cass-operator, azure-ipam, drone, crossplane-provider-gcp-beta-cloudplatform, nerdctl, victoriatraces, containerd, crossplane-provider-aws-codeartifact, crossplane-provider-aws-route53recoveryreadiness-fips, fortio-fips, git-sync-fips, gitleaks, sbomqs,...
CVE-2026-97054 vulnerabilities
Vulnerabilities for packages: cass-operator, azure-ipam, drone, crossplane-provider-gcp-beta-cloudplatform, nerdctl, victoriatraces, containerd, crossplane-provider-aws-codeartifact, crossplane-provider-aws-route53recoveryreadiness-fips, fortio-fips, git-sync-fips, gitleaks, sbomqs,...
GHSA-RG98-F588-44XG vulnerabilities
Vulnerabilities for packages: cass-operator, azure-ipam, drone, crossplane-provider-gcp-beta-cloudplatform, nerdctl, victoriatraces, containerd, crossplane-provider-aws-codeartifact, crossplane-provider-aws-route53recoveryreadiness-fips, fortio-fips, git-sync-fips, gitleaks, sbomqs,...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
GHSA-C9GR-GMG4-2VQV vulnerabilities
Vulnerabilities for packages: snyk-cli, zipkin, jaeger, datawire-envoy, rclone, duckdb, kubeflow-pipelines, apicurio-registry, keycloak, superset, cilium, bun, dapr, gitea, open-webui, grafana-pyroscope, pysilfont, mitmproxy, envoy, bun-bootstrap, kube-metrics-adapter,...
GO-2026-6888 vulnerabilities
Vulnerabilities for packages: snyk-cli, zipkin, jaeger, datawire-envoy, rclone, duckdb, kubeflow-pipelines, apicurio-registry, keycloak, superset, cilium, bun, dapr, gitea, open-webui, grafana-pyroscope, pysilfont, mitmproxy, envoy, bun-bootstrap, kube-metrics-adapter,...
GO-2026-6865 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, gitleaks, git-lfs, flux-source-controller, gitsign, rancher-fleet, spire-server, azcopy, zarf, dagdotdev, kubevela, step-ca, kubescape, grafana-pyroscope, crossplane, argocd-image-updater, gitlab-runner, dive, caddy, argo-events, crane, k9s, tempo, bent...
GO-2026-6778 vulnerabilities
Vulnerabilities for packages: kots, envoy-gateway, kubescape-operator, argocd-image-updater-fips, argocd-image-updater, envoy-gateway-fips, kubescape-operator-fips...
GHSA-C9GR-GMG4-2VQV vulnerabilities
Vulnerabilities for packages: pmm, gitea, librechat, kates-fips, elastic-agent, nvidia-nsight-compute-12.2, pgadmin4-fips, tensorflow-gpu-jupyter, prometheus-blackbox-exporter, commercial-chainloop-cli, kubeflow-katib, dapr, argo-workflow-executor-geomys-fips, cilium-fips, maxscale,...
CVE-2026-116591 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, gitleaks, git-lfs, flux-source-controller, gitsign, rancher-fleet, spire-server, azcopy, zarf, dagdotdev, kubevela, step-ca, kubescape, grafana-pyroscope, crossplane, argocd-image-updater, gitlab-runner, dive, caddy, argo-events, crane, k9s, tempo, bent...
GHSA-FPMH-FRQ8-7RJ8 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, gitleaks, git-lfs, flux-source-controller, gitsign, rancher-fleet, spire-server, azcopy, zarf, dagdotdev, kubevela, step-ca, kubescape, grafana-pyroscope, crossplane, argocd-image-updater, gitlab-runner, dive, caddy, argo-events, crane, k9s, tempo, bent...
CLEANSTART-2026-HM36104 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...
CLEANSTART-2026-KI06386 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...
CLEANSTART-2026-CU84293 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...
CLEANSTART-2026-SS88453 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...
CLEANSTART-2026-OY08890 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...
CLEANSTART-2026-VN85659 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway
Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...