9 matches found
base-drupal
BASE-DRUPAL Questo fa parte di Cved: uno strumento per gestire container docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente immagine: https://github.com/cved-sources/base-drupal Immagine basata su: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...
cve-2019-5420
CVE-2019-5420 Questa è parte di Cved: uno strumento per gestire container Docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente immagine: https://github.com/cved-sources/cve-2019-5420 Autore immagine: https://github.com/knqyf263/CVE-2019-5420...
CVE-2020-11800
Le sezioni richieste dalle linee guida dell'assegnazione sono contrassegnate con “Obbligatorio”. 1. Ambiente Obbligatorio Dockerfile Obbligatorio Questo ambiente utilizza un Dockerfile personalizzato basato sull'immagine vulnerabile di Zabbix Server fornita da Vulhub. root@kitploit: FROM...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-vuln-demo Intentionally vulnerable demo image for Sys...
EUVD-2021-2264
Malware in sbrugna...
CVE-2023-47630 Attacker can cause Kyverno user to unintentionally consume insecure image
Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then...
MMS Exploit Part 3: Constructing the Memory Corruption Primitives
Posted by Mateusz Jurczyk, Project Zero This post is the third of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published a...
Security Bulletin: SmartCloud Provisioning is affected by a vulnerability in OpenSSL (CVE-2014-0160)
Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability...