42675 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update
Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...
NuReaper
NuReaper — Scanner de Segurança de Pacotes NuGet ⚠️ Trabalho em Andamento — O projeto está em desenvolvimento ativo. O motor de varredura principal está sendo reconstruído NuReaper é uma API backend em .NET 8 que analisa automaticamente a segurança de pacotes NuGet. Você fornece um link para...
CVE-2022-31199
CVE-2022-31199 - PoCs de Exploit de RCE do Netwrix Auditor 🔍 Visão Geral da Vulnerabilidade CVE-2022-31199 é uma vulnerabilidade crítica de desserialização insegura de objetos no Netwrix Auditor em versões anteriores à 10.5. A vulnerabilidade existe em um serviço .NET Remoting não protegido que...
CVE-2023-35813_PoC
curl -k -v -X POST "https://target/sitecorexaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" -H "Content-Type: application/x-www-form-urlencoded" --data-urlencode "ISEVENT=1" --data-urlencode "SOURCE=" --data-urlencode "PARAMETERS=ParseControl" ""...
Ubuntu 22.04 LTS : Go vulnerability (USN-8883-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8883-1 advisory. It was discovered that the Go x/net/idna package incorrectly handled certain Punycode-encoded labels that decoded to ASCII-only labels. An attacker could possibly...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500375)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500375 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...
MiracleLinux 9 : osbuild-composer-165.1-5.el9_8.ML.1 (AXSA:2026-1978:12)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1978:12 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...
RHCOS 4 : OpenShift Container Platform 4.20.41 (RHSA-2026:74376)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74376 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame CVE-2026-33814 No...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 packages and security update
Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 security and extras update
Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...
DEBIAN-CVE-2026-105242
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242
The Apache log4net logging framework (versions 1.2.11 through 3.5.0 ) is vulnerable to an Improper Handling of Exceptional Conditions (CWE-755) in the aspnet-request pattern converter. When reading request parameters, certain content—such as markup—triggers ASP.NET request validation , causing th...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter
Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...
DEBIAN-CVE-2026-83550
A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...
CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener
A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...
CVE-2026-83550 Postgres-exporter: net/http/pprof exposed on metrics listener
A flaw was found in postgres-exporter. Due to the blank import of net/http/pprof, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process...