2948 matches found
MAL-2026-264 Malicious code in @ux-foundry/palette (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...
Malicious code in @ux-foundry/palette (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...
CVE-2021-22100
In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that accidentally or maliciously causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or...
CVE-2022-31066
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...
CVE-2025-53710
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
CVE-2025-53710
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
CVE-2025-53710
CVE-2025-53710 affects Palantir Foundry Container Service. A product misconfiguration in certain deployment types allowed communication between different pods in the same namespace, bypassing access control via a vulnerable endpoint that executes user-controlled commands locally. Documented impac...
CVE-2025-53710 Network boundaries not respected in certain Foundry namespaces.
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
CVE-2025-53710 Network boundaries not respected in certain Foundry namespaces.
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
PT-2025-52350
Name of the Vulnerable Software and Affected Versions Foundry Container Service affected versions not specified Description A product misconfiguration in certain deployment types allowed communication between different pods within the same namespace. This resulted in a bypass of access control du...
Palantir Foundry Container Service 安全漏洞
Palantir Foundry Container Service is a hosted container runtime environment from Palantir, Inc. in the United States. A security vulnerability exists in Palantir Foundry Container Service that stems from a product misconfiguration that could lead to bypassing access control...
CVE-2025-53710: Improper Isolation or Compartmentalization
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
Malicious code in test-foundry-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...
MAL-2025-190860 Malicious code in test-foundry-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...
EUVD-2025-198816
Malicious code in test-foundry-app npm...
Aether - Adaptive Exploit and Threat Hunting Engine for EVM-based Repositories
Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and optionally validating those tests on mainnet forks. It combines static analysis, prompt-driven LLM analysis, and AI-ensemble...
1 PoCo: Agentic Proof-Of-Concept Exploit Generation for Smart Contracts
Smart contracts operate in a highly adversarial environment, where vulnerabilities can lead to substantial financial losses. Thus, smart contracts are subject to security audits. In auditing, proof-of-concept PoC exploits play a critical role by demonstrating to the stakeholders that the reported...
EUVD-2018-11896
Malware in sbrugna...