osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce 仓库远程代码执行（RCE） 📋 摘要 Composer 的 Perforce 仓库驱动程序中存在命令注入漏洞，由于仓库 URL 处理过程中输入验证不足，可导致远程代码执行（RCE）。 🎯 漏洞详情 属性| 值 ---|--- CVE ID| CVE-2026-40176 受影响版本| Composer getUser . ' '; if $useClient $p4Command .= '-c ' . $this-getClient . ' '; $p4Command .= '-p ' . $this-getPort . ...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images a...

RockyLinux 10 : osbuild-composer (RLSA-2026:65895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

RHEL 10 : osbuild-composer (RHSA-2026:66327)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66327 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2026-84361-poc

CVE-2026-84361: Composer Perforce P4PORT 命令执行 PoC English version 在 Docker 中运行 使用 Docker Compose，可以在包含受影响 Composer 2.10.2 和 Perforce p4 客户端的隔离环境中进行验证。运行容器将禁用网络、设为只读、删除所有 capability，仅 tmpfs 的 /tmp 和 /work 可写。 root@kitploit: 构建镜像（p4 从官方发布渠道获取并校验 SHA-256） docker compose build 直接验证 p4 的 rsh: 行为（默认）...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

Onapsis_CVE-2025-31324_Scanner_Tools

CVE-2025-31324（Visual Composer 元数据上传器漏洞）漏洞与入侵指标（IoC）扫描器 CVE-2025-31324 是一个影响 SAP NetWeaver 系统的严重漏洞（CVSSv3 10），具体涉及 Visual Composer 元数据上传器组件。该漏洞允许未经身份验证的攻击者向系统上传任意文件，可能导致远程代码执行和系统完全被控。 鉴于该漏洞的严重性，并观察到 Onapsis 威胁情报以及多家 IR 公司和安全研究人员报告的积极利用证据，Onapsis 开发并发布了此开源工具，以帮助 SAP 客户。我们的目标是使信息安全与 SAP...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

composer-CVE-2026-40261-CVE-2026-40176-PoC

!CAUTION 本仓库包含针对 Composer 中漏洞 CVE-2026-40261 和 CVE-2026-40176 的概念验证代码。 !CAUTION 该代码仅用于教育和测试目的。 !CAUTION 请勿在生产环境中使用此代码，或未经适当授权对系统进行测试。 !CAUTION 在测试任何安全漏洞之前，请务必确保您已获得许可。 概述 本仓库演示了 Composer 中通过 Perforce VCS 驱动程序进行命令注入的两个漏洞。 共有三种攻击向量： 1. 向量 1 — 通过 'url' 注入（变为 -p ）。旧代码在构造 Perforce 驱动程序的命令字符串时未对 URL...

Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

ALSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

CVE-2025-31324

CVE-2025-31324 这是一个为利用 CVE-2025-31324 而开发的概念验证代码。 用法 root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help message and exit --htt...

EUVD-2026-69608

Composer arbitrary command execution via a malicious package's Perforce source URL...

Composer arbitrary command execution via a malicious package's Perforce source URL

Summary If the p4 Perforce CLI client is installed, a malicious dependency package from a package repository allowing arbitrary perforce source URLs packagist.org is safe could execute arbitrary commands when running composer install or composer update. Composer passed a package's Perforce source...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Visual Composer 中一个完全未认证的文件上传端点允许任何人将任意文件（例如 JSP WebShell）上传到服务器。 用于检测并利用 SAP NetWeaver Visual Composer "Metadata Uploader" 组件中未认证文件上传漏洞（CVE-2025-31324）的概念验证工具。 免责声明： 本工具仅用于经授权的安全测试。未经授权扫描或利用系统是非法且不道德的行为。 功能特性 默认模式：OAST 检查： 使用 Java 反序列化载荷和 OAST 回调检测漏洞。 需要用户提供 OAST...

CVE-2025-31324

PoC - CVE-2025-31324 [email protected] 针对 SAP NetWeaver Visual Composer 中 CVE-2025-31324 漏洞的测试利用代码，该漏洞允许通过 /developmentserver/metadatauploader 端点在无需身份验证的情况下任意上传文件 。 ⚠️ 此代码仅用于教育目的和授权测试。请勿在生产环境中使用，也不得在未经许可的情况下针对系统使用。 描述 该漏洞允许未经身份验证的远程攻击者向 SAP 服务器上传任意文件，如果上传可执行文件，则可能导致远程代码执行（RCE）。 用法...

stylesmuggler-adobe-patches

disrex/stylesmuggler-adobe-patches 一个 Composer 插件，可自动将 Adobe 官方 APSB26-146 修复 （CVE-2026-75650，内部 参考 VULN-39341）应用于 Magento Open Source 和 Mage-OS ，用于 StyleSmuggler 零日漏洞， 并自动检测您安装的版本。 它会在安装和更新时自行修补已安装的软件包。它不 依赖 cweagans/composer-patches 或根目录的 enable-patching 标志，因此它不会像 composer-patches v1...

stylesmuggler-adobe-patches-mageos

disrex/stylesmuggler-adobe-patches-mageos 通过 composer require 交付 Adobe 官方 APSB26-146 修复 （CVE-2026-75650，内部 参考编号 VULN-39341），适用于 Mage-OS 商店，通过 cweagans/composer-patches 应用。 这是 disrex/stylesmuggler-adobe-patches 的 Mage-OS 配套包（后者适用于 Magento Open Source）。请仅在 Mage-OS 上使用本包。 优先选择包含该修复的 Mage-OS 版本。...