1310 matches found
chart-down
chart-down Scarica e analizza i chart Helm alla ricerca di segreti usando TruffleHog. Data l'URL di un repository Helm, chart-down recupera l'indice del repository, scarica ogni archivio chart, lo estrae ed esegue TruffleHog sul contenuto. Requisiti Go 1.19+ TruffleHog nel PATH brew install...
CVE-2022-0540-RCE
Atlassian Jira Seraph Bypass dell'autenticazione RCE（CVE-2022-0540） Inglese • Cinese Dettagli dell'Exploit Come si vede nel blog dell'autore, atlassian ha fornito una lunga lista di plugin interessati la stragrande maggioranza dei quali erano falsi positivi, e l'autore ha elencato diversi plugin...
CVE-2026-23980-Exploit
CVE-2026-23980 - Apache Superset Iniezione SQL Autenticata root@kitploit: / \ | | | | | || | \\ sqlExpression va direttamente alla query. nessuna parametrizzazione. nessuna speranza. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - colonna adhoc...
CVE-2025-6082
CVE-2025-6082 PoC per Full Path Disclosure Autore : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilità : Full Path Disclosure CWE-200 Descrizione Questa Proof‑of‑Concept sfrutta un bug di Full Path Disclosure nel plugin WordPress Birth Chart Compatibility versioni ≤ 2.0. Il POC...
Compromised-Org-Chart-Generator
Generatore di Organigramma degli Utenti Compromessi Panoramica Active Directory è utilizzato dalle organizzazioni come provider di identità. Contiene informazioni su tutti i dipendenti, inclusi nomi, titoli professionali, reparti e i loro manager. Gli audit delle password possono aiutare a scopri...
CVE-2026-63135 YOURLS: Stored XSS in referrer statistics chart via crafted Referer header
YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourlsgetreferrer, yourlssanitizeurlsafe, and yourlslogredirect, then aggregates the value in yourls-infos.php and passes the derived domain through...
CVE-2026-63135
YOURLS (self-hosted PHP URL shortener) versions 1.5.1 through 1.10.4 are affected by a stored cross-site scripting (XSS) vulnerability in the referrer statistics chart. The root cause is that the chart builder concatenates referrer-derived domain labels into inline JavaScript without proper strin...
CVE-2026-63135 YOURLS: Stored XSS in referrer statistics chart via crafted Referer header
YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourlsgetreferrer, yourlssanitizeurlsafe, and yourlslogredirect, then aggregates the value in yourls-infos.php and passes the derived domain through...
EUVD-2026-62470
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
CVE-2026-71041
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Gantt Chart. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agi...
EUVD-2026-61988
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Gantt Chart. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agi...
PT-2026-78032
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description An issue exists in the Gantt Chart component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with access to the infrastructure where the software executes can...
BIT-SUPERSET-2026-23981 Apache Superset: Improper Authorization in Chart Update allowing Dashboard Modification
An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updating a chart's properties via the REST API, a user can provide a list of dashboard IDs dashboards to associate the char...
CVE-2026-19726
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...
CVE-2026-19726
The Visualizer WordPress plugin before 4.0.7 has a broken access control flaw: any user with the Contributor role or above can retrieve every chart's full configuration in a single request, potentially exposing remote data source credentials stored in chart settings. CVSS 3.1 scores this MEDIUM (...
EUVD-2026-59919
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...
Helm: Helm: Denial of Service via malformed chart files
A flaw was found in Helm. A remote attacker can exploit a denial of service vulnerability by including zero-length byte slices, such as empty files, within Helm chart files. This can trigger an index out of range panic in the Files.Lines template helper, leading to deterministic render failures...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: verticadb-operator, gitlab-runner, lvm-driver, prometheus, harbor, envconsul, rancher-fleet, ko, zarf, crossplane-provider-aws-sns, grpcurl, policy-controller, traefik, trufflehog, bank-vaults, kine, net-kourier, terraform, step-kms-plugin, knative-client, nuclei,...
