672 matches found
CVE-2026-81505 Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials
Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/projectID/sources/sourceID endpoint authorizes access to the project in the URL, but Handler.GetSource calls sources.Service.FindSourceByID and fetches the Source only by sourceID without confirming that its...
CVE-2026-83417
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...
EUVD-2026-79720
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...
CVE-2026-83419
Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...
CVE-2026-83417
A vulnerability in the Oracle Communications Cloud Native Core β Security Edge Protection Proxy (SEPP) component, affecting versions 26.1.200 and 25.2.201 , allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the SEPP. Successful exploitatio...
EUVD-2026-79718
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...
CVE-2026-83419: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...
CVE-2026-83418: Improper Access Control
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via...
PT-2026-92889
Name of the Vulnerable Software and Affected Versions Oracle Communications Cloud Native Core Security Edge Protection Proxy version 26.1.200 Oracle Communications Cloud Native Core Security Edge Protection Proxy version 25.2.201 Description A flaw in the SEPP component allows a low privileged...
CVE-2026-83417: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...
Krawl v2.4.0
Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...
CVE-2026-54523
A flaw was found in Kyverno, a policy engine for cloud-native platforms. A user with specific permissions to create policy objects in one area namespace can exploit a vulnerability where a namespace argument is not properly checked. This allows them to force the system's admission controller, whi...
KubeArmor v1.7.5-rc2
KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...
[SECURITY] Fedora 44 Update: pack-0.40.9-1.fc44
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
[SECURITY] Fedora 43 Update: pack-0.40.9-1.fc43
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
GO-2026-6112 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
nightingale v9.1.1
Open-Source Alerting Expert English | δΈζ π― What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, opa-fips, melange, gomplate-fips, sops, dbmate, kube-rbac-proxy-fips, zot, sigstore-scaffolding-fips, cert-manager-cmctl, opentelemetry-collector-fips, prometheus, spire-server-fips, spegel, osv-scanner, dagger, grpc-health-probe,...
GO-2025-4257 vulnerabilities
Vulnerabilities for packages: k8sgpt, kserve...
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is...