11 matches found
EUVD-2026-60205
FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...
CVE-2026-71566
FakeFish passes credentials to scripts for real hardware BMC validation, but the KubeVirt backend ignores them entirely, relying on a mounted KUBECONFIG file. This lets any cluster user control, power-cycle, and attach arbitrary CD images to VMs owned by other users. CVSS 9.3 (Critical). No patch...
CVE-2026-71566
FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. However, KubeVirt relies on a KUBECONFIG file mounted to the container and completely ignores the credentials. This allows any user of the...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: gitsign, kubevela, pulumi-language-dotnet, flux-source-controller, crossplane, scorecard, grype, kots, gptscript, nuclei, src-fingerprint, grafana-alloy, gitea, apko, k8sgpt, tfsec, go-licenses, melange, snyk-cli, trivy, flux-image-automation-controller, osv-scanner,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: gitsign, kubevela, pulumi-language-dotnet, flux-source-controller, crossplane, scorecard, grype, kots, gptscript, nuclei, src-fingerprint, grafana-alloy, gitea, apko, k8sgpt, tfsec, go-licenses, melange, snyk-cli, trivy, flux-image-automation-controller, osv-scanner,...
The vulnerability of the ISO 9660 Image File Handler component in the libcdio library allows a hacker to execute arbitrary code.
The vulnerability of the ISO 9660 Image File Handler component in the libcdio library is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
[SECURITY] Fedora 27 Update: bchunk-1.2.2-1.fc27
The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...
[SECURITY] Fedora 26 Update: bchunk-1.2.2-1.fc26
The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...
[SECURITY] Fedora 28 Update: bchunk-1.2.2-1.fc28
The bchunk package contains a UNIX/C rewrite of the BinChunker program. BinChunker converts a CD image in a .bin/.cue format sometimes .raw/.cue into a set of .iso and .cdr tracks. The .bin/.cue format is used by some non-UNIX CD-writing software, but is not supported on most other CD-writing...
[SECURITY] [DSA 4026-1] bchunk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4026-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 09, 2017 https://www.debian.org/security/faq -...
The times-the level of WEP crack full power slightly-vulnerability warning-the black bar safety net
With the rapid development of network technology and network applications, more and more, many users began to focus on network security. Believe the wired network to the wireless network in terms of security there is inherent, since the communication medium is a wireless signal, so the intruder c...