1997 matches found
Envoy-CPU-Exhaustion-Vulnerability-PoC
PoC de Vulnerabilidad de Agotamiento de CPU de Envoy Este repositorio contiene un script Python de prueba de concepto PoC para demostrar la vulnerabilidad de agotamiento de CPU en Envoy causada por una avalancha de tramas CONTINUATION. Autor: blackmagic 2024 Descripción Envoy es un proxy de borde...
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...
CVE-2026-88021
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021
Consul and Consul Enterprise contain an authorization bypass in the Connect service mesh . When generating Envoy RBAC rules to enforce Connect intentions, Consul failed to correctly escape certain characters in service names , namespaces , and partitions , causing the resulting authorization rule...
EUVD-2026-75700
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-49975-HTTP-2-Bomb
A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...
GO-2026-4942 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, portieris, envoy-gateway, gitness, zot, kots...
GO-2026-4506 vulnerabilities
Vulnerabilities for packages: opa-fips-envoy, opa-envoy...
GO-2025-3418 vulnerabilities
Vulnerabilities for packages: envoy-gateway...
GO-2026-4771 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, gitlab-elasticsearch-indexer-fips, vault, gitaly, teleport, vault-fips, commercial-grafana, gitlab-elasticsearch-indexer...
GO-2026-4772 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, k3s, kine, commercial-expanso-edge, envoy-gateway, kots, commercial-chainloop-backend, commercial-grafana, spire-server...
GO-2026-5094 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...
GO-2026-5185 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: tigera-operator, xeol-fips, vcluster-fips, gatekeeper, ratify-fips, helm-exporter, tigera-operator-fips, maru, steampipe, cloudbeat, ocm-kubernetes-controller-fips, kubescape-server, cluster-api-helm-controller-fips, k9s, consul-k8s, helm-mapkubeapis, oras, kube-mgmt...
GO-2026-4985 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, traefik-fips, opa-envoy, kubo-fips, splunk-otel-collector, grafana-rollout-operator, cg, gitlab-cng-fips, docker-cli-buildx-fips, falcosidekick, elastic-agent-fips, gatekeeper, hydra-fips, knative-eventing-fips, hubble, kube-logging-operator, loki,...