58982 matches found
CVE-2026-53489 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, chaos-mesh-fips, k9s, helm-operator, linkerd2, zarf, kube-arangodb-fips, chartmuseum, consul-k8s, xeol, helm-exporter, kaniko-fips, eksctl, buildkitd, helm-set-status, trivy-operator, kube-mgmt-fips, grype-db, helm-mapkubeapis, redpanda-operator,...
GHSA-CVXM-645Q-P574 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, chaos-mesh-fips, k9s, helm-operator, linkerd2, zarf, kube-arangodb-fips, chartmuseum, consul-k8s, xeol, helm-exporter, kaniko-fips, eksctl, buildkitd, helm-set-status, trivy-operator, kube-mgmt-fips, grype-db, helm-mapkubeapis, redpanda-operator,...
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, chaos-mesh-fips, k9s, helm-operator, linkerd2, zarf, kube-arangodb-fips, chartmuseum, consul-k8s, xeol, helm-exporter, kaniko-fips, eksctl, buildkitd, helm-set-status, trivy-operator, kube-mgmt-fips, grype-db, helm-mapkubeapis, redpanda-operator,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, chaos-mesh-fips, k9s, helm-operator, linkerd2, zarf, kube-arangodb-fips, chartmuseum, consul-k8s, xeol, helm-exporter, kaniko-fips, eksctl, buildkitd, helm-set-status, trivy-operator, kube-mgmt-fips, grype-db, helm-mapkubeapis, redpanda-operator,...
Linux Distros Unpatched Vulnerability : CVE-2026-46417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12,...
CVE-2025-71344
picklescan before 0.0.30 affected versions 0.0.26 and earlier fails to detect the ensurepip.runpip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip.runpip calls in reduce methods bypass picklescan detection and...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2025-8077 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...
GHSA-8PXW-9C75-6W56 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...
CVE-2025-8077 vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
GHSA-8PXW-9C75-6W56 vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
CVE-2026-53872
picklescan before 0.0.35 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to read arbitrary server files by chaining io.FileIO and urllib.request.urlopen. Attackers can bypass RCE-focused blocklists to exfiltrate sensitive data like /etc/passwd to externa...
EUVD-2026-37741
picklescan before 1.0.3 contains a scanning bypass vulnerability in the scanpytorch function that allows attackers to embed malicious magic numbers via dynamic eval using the reduce trick. Attackers can craft malicious PyTorch payloads that evade picklescan detection while remaining executable,...
EUVD-2025-210270
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbo...
TechMyst-Toolkit
TechMyst-Toolkit "An automated Bug...
web-vulnerability-scanner
No d...
Exploit for CVE-2026-20230
CVE-2026-20230 Scanner A Python-based scanner and validation...
Linux Distros Unpatched Vulnerability : CVE-2026-53702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses...