CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

EUVD-2026-66765

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

CVE-2026-64632

CVE-2026-64632 is a High -severity vulnerability (CVSS v4.0: 8.5) in Veeam ONE that allows a low-privileged user over the network to capture the NTLM credentials of the Reporter service account , without requiring user interaction. The captured credentials enable subsequent-system compromise with...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

CVE-2026-7487

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

CVE-2026-7487 Access Control Check Implemented After Asset is Accessed in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

EUVD-2026-66430

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules du...

CVE-2026-7487

GitLab EE is affected by an improper authorization check where the access control check is implemented after the asset is accessed . An authenticated user with reporter-role permissions who authored a merge request could reset merge request approval rules under certain conditions. The vulnerabili...

GO-2025-3765 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, kyverno-policy-reporter...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone-fips, caddy, cloudflared, tkn, gitness, step-ca, buf, tkn-fips, telegraf, step-issuer, gogatekeeper, step, caddy-fips, dapr-fips, step-ca-fips, rclone, dapr, kyverno-policy-reporter-ui, step-issuer-fips, karma, sftpgo, step-fips, kyverno-policy-reporter-ui-fip...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, crossplane-provider-gcp, fulcio-fips, kyverno-policy-reporter, kine, hubble, temporal-server, kubernetes-csi-external-resizer, secrets-store-csi-driver-provider-azure,...

GO-2025-3765 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, k3s, kubo, q, caddy, k8sgateway, traefik, kargo, dkron, kyverno-policy-reporter-ui, spegel, ipfs-cluster, frp...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, step-ca, gogatekeeper, caddy, rclone, tkn, buf, kyverno-policy-reporter-ui, sftpgo, step-issuer, gitness, cloudflared, step...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-events, kubernetes-event-exporter, kubewatch, argo-cd, argo-rollouts, atlantis, kyverno-policy-reporter, bento, goreleaser...

CVE-2026-64634

A vulnerability allowing local privilege escalation to the Reporter service context...

CVE-2026-64634

Technical details about CVE-2026-64634 are not provided in the supplied documents. Monitor for updates, as public specifics (affected products, root cause, and remediation) are not disclosed here.

EUVD-2026-52754

A vulnerability allowing local privilege escalation to the Reporter service context...

CVE-2026-64634

A vulnerability allowing local privilege escalation to the Reporter service context...

CVE-2026-64634

A vulnerability allowing local privilege escalation to the Reporter service context...