DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Damn Vulnerable Functions as a Service A DHIY Deploy and Hack It Yourself Project that you can deploy and run a bunch of 'orribly insecure functions on AWS Lambda Objective and Audiences We at we45 do a lot of training around Serverless Security, Cloud and security of modern web stacks. ...

serverless-prey

Puma Security Serverless Prey Serverless Prey es una colección de funciones serverless FaaS que, una vez lanzadas a un entorno en la nube e invocadas, establecen un TCP reverse shell, permitiendo al usuario inspeccionar el contenedor subyacente: Panther: AWS Lambda escrito en Node.js Cougar:...

CVE-2026-81664: Missing Authentication for Critical Function

The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basicauth is enabled, wraps each administrative /system/ handler in auth.DecorateWithBasicAuth. TelemetryHandler was left out of that wrap block from 0.27.11, which introduced the route, until 0.27.14, which added i...

EUVD-2025-18266

Malicious code in bioql PyPI...

Directory Traversal

org.noear:solon-faas-luffy is vulnerable to Directory Traversal. The vulnerability is due to improper input validation in the solon-faas-luffy component, which allows a remote attacker to conduct XSS attacks...

GHSA-M63Q-4HR8-5R5H Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

org.noear:solon.luffy (>=3.1.2, <=3.1.3-rc) potentially affected by CVE-2025-46096 via org.noear:solon-faas-luffy (>=3.1.2, <=3.1.3-rc)

org.noear:solon-faas-luffy MAVEN version =3.1.2, =3.1.2, =3.1.3-rc Source cves: CVE-2025-46096 Source advisory: SNYK:JAVA-ORGNOEAR-10558115...

org.noear:solon.luffy (>=3.1.2, <=3.1.3-rc) potentially affected by CVE-2025-46096 via org.noear:solon-faas-luffy (>=3.1.2, <=3.1.3-rc)

org.noear:solon-faas-luffy MAVEN version =3.1.2, =3.1.2, =3.1.3-rc Source cves: CVE-2025-46096 Source advisory: GHSA-M63Q-4HR8-5R5H...

org.noear:solon.luffy (>=3.1.2, <=3.1.3-rc) potentially affected by CVE-2025-46096 via org.noear:solon-faas-luffy (>=3.1.2, <=3.1.3-rc)

org.noear:solon-faas-luffy MAVEN version =3.1.2, =3.1.2, =3.1.3-rc Source cves: CVE-2025-46096 Source advisory: OSV:GHSA-M63Q-4HR8-5R5H...

Solon Vulnerable to Directory Traversal

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

org.noear:solon.luffy (>=3.1.2, <=3.1.3-rc) potentially affected by CVE-2025-46096 via org.noear:solon-faas-luffy (>=3.1.2, <=3.1.3-rc)

org.noear:solon-faas-luffy MAVEN version =3.1.2, =3.1.2, =3.1.3-rc Source cves: CVE-2025-46096 Source advisory: MEND:CVE-2025-46096...

OpenSolon security vulnerabilities

OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon version 3.1.2, which stems from the presence of directory traversal in the solon-faas-luffy component, which could lead to a cross-site scripting...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...

CVE-2025-46096

The solon framework, specifically version 3.1.2 , is vulnerable to a Directory Traversal vulnerability within the solon-faas-luffy component. This flaw is caused by improper input validation , which allows a remote attacker to access files outside the intended directory or craft requests that res...

PT-2025-25410 · Unknown +1 · Solon-Faas-Luffy +1

Name of the Vulnerable Software and Affected Versions: solon version 3.1.2 Description: A Directory Traversal issue allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component. Recommendations: For solon version 3.1.2, consider restricting access to the solon-faas-luffy...