CVE-2025-34300POC

Sawtooth Lighthouse Studio имеет уязвимость внедрения шаблонов CVE-2025-34300 Параметры: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Примеры: root@kitploit: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测;...

SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution

A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the eval function within the Perl CGI component ciwweb.pl, where attacker-supplied input inside hidRandomACARAT is directly...

lightkeeper

lightkeeper Порт плагина Lighthouse для GHIDRA. Иконки созданы Pixel perfect с сайта www.flaticon.com...

Chromium: CVE-2026-79053 Missing authorization in Lighthouse

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79053

A flaw was found in Lighthouse in Google Chrome. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page to the...

Linux Distros Unpatched Vulnerability : CVE-2026-79053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged...

DEBIAN-CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79053

CVE-2026-79053 is a missing authorization flaw in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can bypass site isolation by presenting a crafted HTML page to the victi...

PT-2026-81647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Lighthouse allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML page...

CVE-2026-66788

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

CVE-2026-66788 Lighthouse: dockerfile build stages use end-of-life fedora 40 referenced by mutable tag

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

CVE-2026-66788

CVE-2026-66788 is a flaw in Lighthouse , a Kubernetes multi-cluster networking component. An attacker who compromises a spoke cluster can exploit an attacker-controlled label or annotation on the broker object to determine the destination namespace for resource injection. This allows injection of...

EUVD-2026-63535

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

CVE-2026-66788 Lighthouse: dockerfile build stages use end-of-life fedora 40 referenced by mutable tag

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...