Lucene search
+L

439 matches found

Kitploit
Kitploit
added 2026/09/14 5:53 p.m.11 views

CVE-2024-8856

CVE-2024-8856:WordPress WP Time Capsule 插件任意文件上传漏洞 概述 CVE-2024-8856 是 WP Time Capsule WordPress 插件中存在的一个安全漏洞,允许未认证用户在服务器上上传任意文件。如果上传的文件被服务器执行,这可能导致远程代码执行。该漏洞源于不充分的文件验证,攻击者可通过向易受攻击的端点发送特制请求来利用此漏洞。 受影响版本 1.22.21 之前的 WP Time Capsule 插件版本(已在 1.22.22 中修复)。 影响 该漏洞允许未认证用户: 在服务器上上传恶意 PHP 脚本。...

9.8CVSS8.2AI score0.94004EPSS
SaveExploits7
NVD
NVD
added 2026/09/14 5:17 p.m.3 views

CVE-2026-57497

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the capsule reader, retaining the complete declared capsule body in memory. A...

5.3CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/14 4:05 p.m.2 views

EUVD-2026-77618

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the capsule reader, retaining the complete declared capsule body in memory. A...

5.3CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/14 4:05 p.m.12 views

CVE-2026-57497 webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the capsule reader, retaining the complete declared capsule body in memory. A...

5.3CVSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.8 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: corrected incorrect allocation size gcc-14 notes that the allocation using sizeofvoid on 32-bit architectures is insufficient for a 64-bit physaddrt: drivers/firmware/efi/capsule-loader.c: In the function...

5.5CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 10:04 a.m.12 views

capsule

Capsule はじめに • ドキュメント • イシュー • コントリビュート 概要 Capsule は、信頼されていないコードを分離された環境で実行するためのランタイムです。各タスクは独自の WebAssembly サンドボックス内で動作し、以下を提供します。 分離された実行 : 各タスクはホストシステムから分離されて実行されます リソース制限 : タスクごとに CPU、メモリ、タイムアウトの制限を設定できます 自動リトライ : 手動介入なしで障害を処理します ライフサイクル追跡 : 実行中、完了、失敗したタスクを監視できます 動作の仕組み Python の場合 Python 関数に...

6.2AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 12:57 a.m.8 views

CVE-2024-8856

CVE-2024-8856 このツールは、CVE-2024-8856 に関連するWP Time Capsule プラグインの脆弱性をWordPressサイトでスキャンします。バージョン"1.22.22"未満のプラグインを脆弱性ありと識別し、結果を"vuln.txt"に記録します。シンプルかつ効率的で、セキュリティ研究者や管理者がリスクを迅速に検出し対処するのに役立ちます。 機能 URLリストをスキャンして、CVE-2024-8856に関連するWP Time Capsuleプラグインの脆弱性を検出します。 プラグインバージョンが1.22.22...

9.8CVSS8.2AI score0.94004EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/10 6:38 p.m.6 views

WPTimeCapsulePOC

Backup and Staging by WP Time Capsule 1.21.16 - 身份认证绕过概念验证 最近在 WP Time Capsule 1.21.16 中发现了一个身份认证绕过漏洞(https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/)。此 PoC 演示了该问题的工作原理以及如何利用它。 该 PoC 该 PoC 提供两种不同的选项: 选项 1:获取管理员 cookie 示例: root@kitploit: poc.py http://127.0.0.1/ 选项...

6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.4 views

The vulnerability of the __efi_capsule_setup_info() function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel’s firmware module allows a hacker to trigger a system failure.

The vulnerability of the eficapsulesetupinfo function in the drivers/firmware/efi/capsule-loader.c file of the Linux kernel firmware module is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS4.5AI score0.00135EPSS
SaveExploits0References14Affected Software3
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A issue was discovered in the Linux kernel through version 5.19.8. In the file drivers/firmware/efi/capsule-loader.c, there is a race condition that leads to a use-after-free situation...

4.7CVSS6.7AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/18 2:32 p.m.7 views

GO-2026-6099 webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go...

5.3CVSS5.3AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.12 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100747 advisory. In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for...

5.5CVSS4.9AI score0.00135EPSS
SaveExploits0References4
Circl
Circl
added 2026/07/31 6:35 p.m.15 views

CVE-2026-65835

creationtimestamp| type| source ---|---|--- 2026-07-31 18:35:41+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-jr6p-8pjj-mfx6...

6.6CVSS5.3AI score0.00192EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/31 6:35 p.m.13 views

CVE-2026-65834

creationtimestamp| type| source ---|---|--- 2026-07-31 18:35:08+00:00| published-proof-of-concept| https://github.com/projectcapsule/capsule/security/advisories/GHSA-68cj-mvg9-rgm2...

6.8CVSS5.3AI score0.00267EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/07/31 4:53 p.m.17 views

Capsule has an incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)

Summary CVE-2026-22872 GHSA-qjjm-7j9w-pw72 reported that a Tenant Owner could create cluster-scoped resources e.g. ClusterRole, ValidatingWebhookConfiguration through a TenantResource, because the controller applies them with its cluster-admin ServiceAccount and SetNamespace is ineffective for...

9.1CVSS5.5AI score0.0068EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/07/31 4:53 p.m.14 views

GHSA-68CJ-MVG9-RGM2 Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Summary CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and ForbiddenAnnotations.Regex are never validated by any admission webhook. A Cluster Admin can persist a malformed regex to etcd without being blocked. Once stored, every Node CREATE, UPDATE, or PATCH request triggers...

6.8CVSS5.5AI score0.00267EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/31 4:53 p.m.19 views

Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Summary CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and ForbiddenAnnotations.Regex are never validated by any admission webhook. A Cluster Admin can persist a malformed regex to etcd without being blocked. Once stored, every Node CREATE, UPDATE, or PATCH request triggers...

6.8CVSS5.5AI score0.00267EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/07/31 4:53 p.m.21 views

EUVD-2026-51295

Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests...

6.8CVSS5.5AI score0.00267EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/30 8:18 p.m.19 views

CVE-2026-65834

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster...

6.8CVSS0.00267EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/30 8:18 p.m.13 views

CVE-2026-65835

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026-22872 fix, TenantResource RawItems and Generators in internal/controllers/resources/collect.go, including handleRawItem and handleGeneratorItem, did not apply the...

6.6CVSS0.00192EPSS
SaveExploits0References2
Rows per page
Query Builder