5592 matches found
redis: Redis: Remote Code Execution via specially crafted RESTORE payload
A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...
Important: Red Hat Security Advisory: valkey security, bug fix, and enhancement update
An update for valkey is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2025-32023
CVE-2025-32023 PoC y Exploit para CVE-2025-32023 GHSA-rp2m-q4j6-gr43 / PlaidCTF 2025 "Zerodeo" Reproducción / Parche Probado contra redis:7.4.2-alpine3.21@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952 Afecta a las versiones de Redis = 2.8. Parcheado en 8.0.3, 7.4.5,...
RHEL 10 : valkey (RHSA-2026:64796)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64796 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists,...
Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
AlmaLinux 8 : redis:6 (ALSA-2026:64823)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...
Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
ALSA-2026:64824 Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
RHEL 8 : redis:6 (RHSA-2026:64823)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64823 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
RHEL 9 : redis (RHSA-2026:64824)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64824 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
ALSA-2026:64823 Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
RHEL 9 : redis:7 (RHSA-2026:65120)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65120 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
gitlab-SSRF-redis-RCE
gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLF Injection Combined with Redis Remote Code Execution 0x00 Vulnerability environment root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef6...
DarkReplica
DarkReplica CVE-2026-23631 Redis Post-Auth RCE Exploit The full technical writeup can be found here: https://www.zeroday.cloud/blog/redis-cve-2026-23631-dark-replica...
MAL-2026-16036 Malicious code in redis-type-intel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f84d412afce72584ec95c5e2595987bf307b67540da51870c8a3a22b05952 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in redis-type-intel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6f84d412afce72584ec95c5e2595987bf307b67540da51870c8a3a22b05952 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in oscar-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16035 Malicious code in oscar-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c988ef2dab3264cefcab98e4aae196d6c45b5555b22641e5862d89bde83815b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
cve-2025-49844
CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...