Lucene search
+L

2660 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.3 views

Fedora 45 : composer (2026-249d41312c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-249d41312c advisory. Version 2.10.3 - 2026-08-27 Security: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Security:...

7.7CVSS0.00409EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2026/09/11 12:00 a.m.6 views

osbuild-composer security update

176-1.0.2 - Rebuild for CVE-2026-33810, CVE-2026-33818, CVE-2026-39820, CVE-2026-42499,CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

8.8CVSS5.8AI score0.00798EPSS
SaveExploits0
Patchstack
Patchstack
added 2026/09/10 8:43 p.m.6 views

WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sungbyeongchan in WordPress Plugin Visual Composer Website Builder versions = 45.16.1...

6.5CVSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/10 8:08 p.m.7 views

CVE-2025-31324_PoC_SAP

CVE-2025-31324PoC Proof-of-Concept para CVE-2025-31324: Subida no autenticada en el cargador de metadatos de SAP NetWeaver Visual Composer Este script realiza: 1. Subida de archivo al endpoint vulnerable a través del host/puerto de subida 2. Disparador opcional mediante HTTP GET a través del...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
RedHat Linux
RedHat Linux
added 2026/09/10 6:06 a.m.6 views

Important: Red Hat Security Advisory: osbuild-composer security, bug fix, and enhancement update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS5.8AI score0.00798EPSS
SaveExploits0References13
Rockylinux
Rockylinux
added 2026/09/10 6:01 a.m.9 views

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

9.6CVSS6AI score0.00784EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:00 a.m.7 views

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce 仓库远程代码执行(RCE) 📋 摘要 Composer 的 Perforce 仓库驱动程序中存在命令注入漏洞,由于仓库 URL 处理过程中输入验证不足,可导致远程代码执行(RCE)。 🎯 漏洞详情 属性| 值 ---|--- CVE ID| CVE-2026-40176 受影响版本| Composer getUser . ' '; if $useClient $p4Command .= '-c ' . $this-getClient . ' '; $p4Command .= '-p ' . $this-getPort . ...

8.8CVSS7.8AI score0.01688EPSS
SaveExploits4
Rockylinux
Rockylinux
added 2026/09/10 12:09 a.m.8 views

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...

8.8CVSS5.8AI score0.00798EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.4 views

RockyLinux 10 : osbuild-composer (RLSA-2026:65895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

8.8CVSS6AI score0.00798EPSS
SaveExploits0References21
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.5 views

RHEL 10 : osbuild-composer (RHSA-2026:66327)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66327 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

8.8CVSS6AI score0.00798EPSS
SaveExploits0References25
RedHat Linux
RedHat Linux
added 2026/09/09 4:12 p.m.6 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

9.6CVSS7.2AI score0.00784EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/09 1:44 p.m.6 views

CVE-2026-84361-poc

CVE-2026-84361: Composer Perforce P4PORT 命令执行 PoC English version 在 Docker 中运行 使用 Docker Compose,可以在包含受影响 Composer 2.10.2 和 Perforce p4 客户端的隔离环境中进行验证。运行容器将禁用网络、设为只读、删除所有 capability,仅 tmpfs 的 /tmp 和 /work 可写。 root@kitploit: 构建镜像(p4 从官方发布渠道获取并校验 SHA-256) docker compose build 直接验证 p4 的 rsh: 行为(默认)...

7.7CVSS6AI score0.00409EPSS
SaveExploits1References5
Rockylinux
Rockylinux
added 2026/09/09 12:05 p.m.9 views

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

9.6CVSS5.8AI score0.00798EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 11:45 a.m.8 views

Onapsis_CVE-2025-31324_Scanner_Tools

CVE-2025-31324(Visual Composer 元数据上传器漏洞)漏洞与入侵指标(IoC)扫描器 CVE-2025-31324 是一个影响 SAP NetWeaver 系统的严重漏洞(CVSSv3 10),具体涉及 Visual Composer 元数据上传器组件。该漏洞允许未经身份验证的攻击者向系统上传任意文件,可能导致远程代码执行和系统完全被控。 鉴于该漏洞的严重性,并观察到 Onapsis 威胁情报以及多家 IR 公司和安全研究人员报告的积极利用证据,Onapsis 开发并发布了此开源工具,以帮助 SAP 客户。我们的目标是使信息安全与 SAP...

10CVSS8.1AI score0.99512EPSS
SaveExploits19
RedHat Linux
RedHat Linux
added 2026/09/09 11:16 a.m.7 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS5.8AI score0.00798EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/09 8:31 a.m.9 views

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION 本仓库包含针对 Composer 中漏洞 CVE-2026-40261 和 CVE-2026-40176 的概念验证代码。 !CAUTION 该代码仅用于教育和测试目的。 !CAUTION 请勿在生产环境中使用此代码,或未经适当授权对系统进行测试。 !CAUTION 在测试任何安全漏洞之前,请务必确保您已获得许可。 概述 本仓库演示了 Composer 中通过 Perforce VCS 驱动程序进行命令注入的两个漏洞。 共有三种攻击向量: 1. 向量 1 — 通过 'url' 注入(变为 -p )。旧代码在构造 Perforce 驱动程序的命令字符串时未对 URL...

8.8CVSS7.6AI score0.01688EPSS
SaveExploits4
AlmaLinux
AlmaLinux
added 2026/09/09 12:00 a.m.8 views

Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

9.6CVSS6.9AI score0.00784EPSS
SaveExploits0References22
OSV
OSV
added 2026/09/09 12:00 a.m.3 views

ALSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

9.6CVSS6AI score0.00784EPSS
SaveExploits0References22
Kitploit
Kitploit
added 2026/09/08 11:52 p.m.6 views

CVE-2025-31324

CVE-2025-31324 A proof of concept developed to exploit CVE-2025-31324. Usage root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this hel...

10CVSS8.2AI score0.99512EPSS
SaveExploits19References1
EUVD
EUVD
added 2026/09/08 9:25 p.m.8 views

EUVD-2026-69608

Composer arbitrary command execution via a malicious package's Perforce source URL...

7.7CVSS5.9AI score0.00409EPSS
SaveExploits1References6
Rows per page
Query Builder