158 matches found
F5 BIG-IP Container Ingress Services 安全漏洞
F5 BIG-IP Container Ingress Services is a device management platform provided by the American company F5. F5 BIG-IP Container Ingress Services has security vulnerabilities, which stem from excessive permissions that may allow access to cluster keys...
PT-2026-6107
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Container Ingress Services affected versions not specified Description A flaw exists in F5 BIG-IP Container Ingress Services that could permit excessive permissions, potentially allowing unauthorized access to read cluster secrets...
Predicting 2026
Welcome to this week's edition of the Threat Source newsletter. It's become traditional at this time of year to make predictions about cybersecurity for the coming year. Obviously, no one has a crystal ball to predict the future, and if they did, they would be quietly making a fortune rather than...
GO-2025-4104 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
...
EUVD-2025-38214
KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-controlled node. This vulnerability could...
CVE-2025-64343
CVE-2025-64343 affects the conda Constructor tool. In versions 3.12.2 and earlier, the installation directory inherits permissions from its parent, and outside restricted directories those permissions can permit write access by authenticated users. Any logged-in user could modify during installat...
EUVD-2025-37212
Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets that were too permissive. In particular, the nagios.service unit had executable permissions that were not required. Overly permissive permissions on service unit files can broaden local attack surface by...
EUVD-2007-2468
Malware in sbrugna...
EUVD-2021-10001
Malware in sbrugna...
EUVD-2019-6310
Malware in sbrugna...
EUVD-2016-1639
Malware in sbrugna...
EUVD-2019-3912
Malware in sbrugna...
New Study Warns Several Free iOS and Android VPN Apps Leak Data
A Zimperium zLabs analysis of 800 free Android and iOS VPN apps exposes critical security flaws, including the Heartbleed bug, excessive system permissions, and non-transparent data practices. Learn how these 'privacy' tools are actually major security risks, especially for BYOD environments...
EUVD-2022-27557
Malicious code in bioql PyPI...
EUVD-2021-33937
Malicious code in bioql PyPI...
EUVD-2024-54661
Malicious code in bioql PyPI...
EUVD-2022-29025
Malicious code in bioql PyPI...