904 matches found
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: bento, kubernetes-csi-node-driver-registrar-fips, cloud-provider-azure, libnvidia-container-fips, paranoia, flux-helm-controller-fips, opa-fips-envoy, eksctl, gitleaks, step-ca, crane, seaweedfs, flux-source-watcher, helm, commercial-grafana, knative-serving,...
PT-2026-28315
Name of the Vulnerable Software and Affected Versions Foreman versions prior to 3.16.3 Foreman versions prior to 3.17.2 Foreman versions prior to 3.18.1 Description A flaw exists in Foreman that allows a remote attacker to exploit a command injection vulnerability within the WebSocket proxy...
org.jenkins-ci.main:jenkins-test-harness (1.432), org.jenkins-ci.main:jenkins-war (1.432) +6 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.432)
org.jenkins-ci.main:jenkins-core MAVEN version 1.432 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.432 - org.jenkins-ci.main:jenkins-war 1.432 -...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: cfssl-fips, go-spdk-helper, kubernetes-csi-node-driver-registrar-fips, maru, gcp-compute-persistent-disk-csi-driver, local-path-provisioner, cloud-provider-azure, libnvidia-container-fips, paranoia, crossplane-provider-aws-cognitoidentity-fips, mc,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: cfssl-fips, go-spdk-helper, kubernetes-csi-node-driver-registrar-fips, maru, gcp-compute-persistent-disk-csi-driver, local-path-provisioner, cloud-provider-azure, libnvidia-container-fips, paranoia, crossplane-provider-aws-cognitoidentity-fips, mc,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: cfssl-fips, maru, kubernetes-csi-node-driver-registrar-fips, gcp-compute-persistent-disk-csi-driver, local-path-provisioner, cloud-provider-azure, libnvidia-container-fips, paranoia, crossplane-provider-aws-cognitoidentity-fips, mc, flux-helm-controller-fips,...
CVE-2018-1000153
A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java,...
CVE-2021-22049
The vSphere Web Client FLEX/Flash contains an SSRF Server Side Request Forgery vulnerability in the vSAN Web Client vSAN UI plug-in. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an...
CVE-2021-22018
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files...
CVE-2022-23235
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when...
CVE-2022-23239
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting XSS attack...
CVE-2023-43029
IBM Storage Virtualize vSphere Remote Plug-in 1.0 and 1.1 could allow a remote user to obtain sensitive credential information after deployment...
CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People's Republic of China PRC to maintain long-term persistence on compromised systems. "BRICKSTORM is a...
VMware VDP Known SSH Key
VMware vSphere Data Protection appliances 5.5.x through 6.1.x contain a knownssh private key for the local user admin who is a sudoer without password from kittysploit import from lib.protocols.ssh.sshclient import Sshclient from lib.exploit.handler import Handler class ModuleExploit, Sshclient,...
Exploit for CVE-2021-21980
CVE-2021-21980 Vulnerable Test Environment Overview Realis...
Exploit for CVE-2021-21980
Clippy of the Dead - CVE-2021-21980 testing environment and Nucl...
The State of Security Today: Setting the Stage for 2026
As we close out 2025, one thing is clear: the security landscape is evolving faster than most organizations can keep up. From surging ransomware campaigns and AI-enhanced phishing to data extortion, geopolitical fallout, and gaps in cyber readiness, the challenges facing security teams today are ...
nautobot-ssot-aristacv (>=1.0.6, <=1.6.0), nautobot-ssot-infoblox (>=0.0.1.dev0, <=0.8.0) +3 more potentially affected by CVE-2025-62607 via nautobot-ssot (1.6.5)
nautobot-ssot PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot-ssot and may be impacted: - nautobot-ssot-aristacv =1.0.6, =0.0.1.dev0, =0.0.3.dev0, =0.1.0, =0.1.4 Source cves: CVE-2025-62607 Source advisory:...
