423 matches found
PT-2026-1312
Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.420.7 Description Coolify is a self-hostable tool for managing servers, applications, and databases. A Remote Code Execution RCE issue exists in the application deployment workflow. A low-privileged member...
PT-2026-28560
Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.23.0 Description Incus, a system container and virtual machine manager, allows instance template files to be used to perform arbitrary read and write operations as root on the host server. The software utilizes pongo2...
CVE-2025-68697 Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
n8n is an open source workflow automation platform. Prior to version 2.0.0, in self-hosted n8n instances where the Code node runs in legacy non-task-runner JavaScript execution mode, authenticated users with workflow editing access can invoke internal helper functions from within the Code node...
Exploit for CVE-2025-9074
CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...
EUVD-2016-9488
Malware in sbrugna...
EUVD-2007-1219
Malware in sbrugna...
EUVD-2025-15953
Malicious code in bioql PyPI...
EUVD-2023-3103
Malicious code in bioql PyPI...
EUVD-2023-49505
Malicious code in bioql PyPI...
EUVD-2023-1529
Malicious code in bioql PyPI...
EUVD-2022-43881
Malicious code in bioql PyPI...
EUVD-2022-6544
Malicious code in bioql PyPI...
EUVD-2024-0459
Malicious code in bioql PyPI...
EUVD-2022-2835
Malicious code in bioql PyPI...
CLSA-2025-1759505734 podman: Fix of CVE-2025-9566
CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...
Symlink Exchange Can Allow Host Filesystem Access
...
podman: Build Context Bind Mount
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files...
SUSE CVE-2025-59341
esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...
Docker Image Persistence
This module maintains persistence on a host by creating a docker image which runs our payload, and has access to the host's file system /host in the container. Whenever the container restarts, the payload will run, or when the payload dies the executable will run again after a delay. This will...
