ehir-vuln-enterprise-login

Configurazione locale del portale aziendale Enterprise Questo progetto contiene una configurazione containerizzata locale con un portale frontend e un gateway backend integrato. Struttura del Workspace client/: Contiene i file statici del frontend index.html basati su Bootstrap 5 e il gestore del...

Reflected-XSS-on-Opentext-Portal-v7.4.4

Cross-Site-Scripting-Schwachstelle XSS in OpenText Portal v7.4.4 ermöglicht es entfernten Angreifern, beliebigen Web-Skript- oder HTML-Code über den URI-Parameter vgnextoid einzuschleusen. Angriffsvektor: Javascript-Injektion in den Parameter vgnextoid, dem "--" HTML-Kommentar-Abschlusssequenz...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

EUVD-2026-65469

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

Docker-breakout-runc

Fuga da Docker tramite runc Originariamente da: https://github.com/Frichetten/CVE-2019-5736-PoC. Questo repository è semplicemente un mio esperimento con il PoC e un tentativo di comprendere il flusso dell'exploit...

CVE-2026-75019

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

CVE-2026-75019 Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

CVE-2026-75019

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE WordPress plugin is vulnerable to Stored XSS via the cozyHoverEffect Block Attribute in all versions up to and including 2.2.16 . The root cause is insufficient input sanitization and output escaping : an authenticated attacker with contri...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2025-9074-PoC

Docker API – Nicht authentifizierte RCE CVE-2025-9074 Eine kritische Sicherheitslücke CVE-2025-9074 in Docker Desktop ermöglicht lokal laufenden Linux-Containern, eine Verbindung zur Docker Engine API über das Standard-Subnetz 192.168.65.7:2375 herzustellen. Das Problem besteht unabhängig von...

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

CVE-2026-76837

Baserow before 2.3.0 is vulnerable to stored cross-site scripting via the rich-text mention feature. The display name set through PATCH /api/user/account/ is interpolated without HTML encoding into the mention element built in mention.js. A name containing a double quote breaks out of the data-la...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825 HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions that can be exploited over the network without prior authentication (CVSS 7.5, HIGH). The vulnerability enables unauthorized lateral movement , container breakout , and interception of sensitive internal communications , with the primary impac...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

Astra Linux – Vulnerability in runc-app

Runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, an attacker can trick runc into binding paths that are normally read-only or masked, allowing them to be...

PT-2026-80900

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...