234 matches found
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 ęÆåØ xz å·„å ·ēäøęøøåē¼©å äøåē°ēäøäøŖäø„éå®å Øę¼ę“ļ¼čŖ 5.6.0 ēę¬čµ·ååØćčÆ„ę¼ę“ę¶åäøꮵę¶ę代ē ļ¼å®éčæå¤ęēę··ę·ęꮵęēŗµ liblzma ēęå»ŗčæēØć čæäøŖä»åŗęÆåä»ä¹ēØēļ¼ ę¤ä»åŗēØäŗåø®å©ä½ ę£ęµē³»ē»äø xz ęÆå¦ååØę¼ę“ļ¼å¹¶čŖåØäæ®å¤čÆ„é®é¢ć ä½æēØę¹ę³ļ¼ $ python3 detect.py ę¼ē¤ŗļ¼...
-CVE-2024-3094-Vulnerability-Checker-Fixer-Public
č”Øč¾¾ęÆę å¦ęęØč§å¾čæäøŖčę¬ęēØļ¼å¹¶äøå®åø®å©ęØäæę¤äŗē³»ē»å å CVE-2024-3094 ēå½±åļ¼čÆ·ččē»å®ē¹äøäøŖę ā ćē»čæäøŖä»åŗē¹ęäøä» ęÆåƹę们ēęÆęļ¼čæč½åø®å©ę“å¤äŗŗåē°å¹¶åēäŗę们äøŗęé«ē½ē»å®å Øęåēéä½åŖåć č¦äøŗä»åŗē¹ęļ¼åŖéē¹å»ę¬é”µé”¶éØēāStarāęé®ćéåøøęč°¢ęØēęÆęļ¼ ęč°¢ęØåø®å©č®©ę°åäøēåå¾ę“å å®å Øļ¼ CVE-2024-3094 ęÆä»ä¹ CVE-2024-3094 ęÆäøäøŖåØ xz å·„å ·ēäøęøø tarball äøåē°ēå ³é®å®å Øę¼ę“ļ¼ä» 5.6.0 ēę¬å¼å§ååØćčÆ„ę¼ę“ę¶åę¶ę代ē ļ¼éčæå¤ęēę··ę·ęꮵęēŗµ liblzma ēęå»ŗčæēØć XZ Utils āå ä¹ååØäŗęÆäøŖ...
ingress-nginx-0.21-1.19.5
ęå»ŗļ¼ cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...
pacumen
ę éå®č£ ćä½čÆ·čæč” python setup.py build 仄čŖåØå®č£ ä¾čµé”¹ć...
CVE-2023-51444
ę¬READMEåø®å©ęØå¼å§ä½æēØGeoServerå¼åćå®å°ęåƼęØå¦ä½ę£åŗęŗ代ē ćē¼čÆ并čæč”ć GeoServerå¼åéč¦Java 8ćMavenågitćē±äŗJavaē±»åŗēē»å¾®ååļ¼ę们ē®åč¦ę±ä½æēØJava 8čæč”å¼åļ¼å°½ē®”ęē»äŗ§ååØJava 11äøęµčÆčæļ¼ć ę“å¤čµęļ¼ http://docs.geoserver.org/latest/en/developer/index.html == Linux == 1. å®č£ å å³ę”件 ä»ęØēLinuxåč”ēč·åOpenJDK 8ćMavenågitć == macOS == 1. å®č£ Javačæč”ę¶ēÆå¢ äøč½½å¹¶å®č£ Java...
CVE-2026-106509 Backstage: Improper validation of MkDocs theme configuration in TechDocs
Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write...
CVE-2026-105137
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
CVE-2026-105137 Laradock Build Process Dockerfile code download
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
CVE-2026-105137 Laradock Build Process Dockerfile code download
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
EUVD-2026-92085
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
CVE-2026-105137
A vulnerability exists in Laradock (versions up to 20.4 ) within the Build Process component. Specifically, an unknown function in the workspace/Dockerfile allows for the download of code without integrity checks . This flaw can be exploited remotely with high complexity, and public exploit code ...
CVE-2026-105137: Download of Code Without Integrity Check
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
PT-2026-104616
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without integrity check. The attack can be launched remotely. A high complexity level is associated with...
Rocky Linux 8 [CIQ] Security Update: cockpit-podman / container-selinux / containernetworking-plugins / etc (crlsa-2020_1931)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20201931 advisory. buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Tenable has extracted the preceding description block...
UBUNTU-CVE-2026-86320
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...
hugo: github.com/gohugoio/hugo: Hugo: Server-Side Request Forgery (SSRF) leading to information disclosure.
A flaw was found in Hugo. The security.http.urls allowlist, which controls outbound fetches, does not adequately validate the destination address of URLs. This vulnerability allows a remote attacker to supply a specially crafted URL that resolves to internal network resources. As a result, the Hu...
Exploit for Eval Injection in Langflow
CVE-2026-33017 Langflow RCE ā CVE-2026-33017 Langflow Remote...
CVE-2026-75569
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-76139 Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
EUVD-2026-63087
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...