224 matches found
Teleport 安全漏洞
Teleport is an identity-aware, multi-protocol access agent from Teleport, Inc. used by engineers and security professionals to unify access to SSH servers, Kubernetes clusters, web applications, and databases across all environments. A security vulnerability exists in Teleport version 17.5.1 and...
Teleport allows remote authentication bypass
Impact A full technical disclosure and open-source patch will be published after the embargo period, ending on June 30th, to allow all users to upgrade. Teleport security engineers identified a critical security vulnerability that could allow remote authentication bypass of Teleport. Teleport Clo...
EUVD-2025-18566
Teleport allows remote authentication bypass...
Incorrect Authorization
Overview github.com/gravitational/teleport/lib/client is a privileged access management tool. Affected versions of this package are vulnerable to Incorrect Authorization when validating SSH host certificate signatures. Due to a related issue in the processing of IsUserAuthority and IsHostAuthorit...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization when validating SSH host certificate signatures. Due to a related issue in the processing of IsUserAuthority and IsHostAuthority by x/crypto/ssh, an attacker can gain unauthorized access by providing a signed SSH...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization when validating SSH host certificate signatures. Due to a related issue in the processing of IsUserAuthority and IsHostAuthority by x/crypto/ssh, an attacker can gain unauthorized access by providing a signed SSH...
PT-2025-25604
Name of the Vulnerable Software and Affected Versions Teleport versions prior to 17.5.2 Teleport versions 17.0.0 through 17.5.1 Teleport versions 16.0.0 through 16.5.11 Teleport versions 15.0.0 through 15.5.2 Teleport versions 14.0.0 through 14.4.0 Teleport versions 13.0.0 through 13.4.26 Telepor...
CVE-2022-36633
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social...
CVE-2021-41394
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations...
CVE-2021-43819
Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Minecarts with chests will drop their items when teleporting through a portal; when they reappear, they will still have their items impacting the integrity of the game world. The...
CVE-2025-28855
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through = 1.2.4...
Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2788 Malicious code in teleport-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-28855
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through = 1.2.4...
CVE-2025-28855
CVE-2025-28855 – Teleport (WordPress plugin) : Reflected XSS due to improper input neutralization in web page generation. Affected: Teleport up to version 1.2.4. Connected sources confirm the issue (CVE entry) and list Teleport as vulnerable to Reflected Cross-Site Scripting; no explicit fix/vers...
CVE-2025-28855 WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through = 1.2.4...
WordPress plugin Teleport 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Teleport versions = 1.2.4...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: helm, cilium-cli, nerdctl, dagger, spegel, fuse-overlayfs-snapshotter, k8ssandra-client, opa-envoy, zot, cert-manager-cmctl, cluster-api-helm-controller, melange, skaffold, syft, envoy-gateway, kaniko, grype, k3s, newrelic-infrastructure-agent, eksctl, helm-operator,...