EUVD-2026-87690

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragment components returned by parseurl, and never inspects the userinfo user:pass@ components. This is an incomplete fix f...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

CVE-2023-29007

CVE-2023-29007 CVE-2023-29007 の PoC リポジトリ 詳細情報は以下で参照できます: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/ https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Laravel設定インジェクションを介したコード実行 脆弱性に関するブログ記事 https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ これはCTFや学習目的で使用できます。 楽しんでください。神のご加護がありますように。...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Octavia vulnerabilities (USN-8814-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8814-1 advisory. It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticate...

CVE-2026-3288-lab

CVE-2026-3288 脆弱性ラボ（Docker） NGINX Ingress Controller 設定インジェクション ⚠️ 警告 : このラボには意図的に脆弱な設定が含まれており、認可されたセキュリティトレーニング専用 です。 脆弱性の概要 CVE-2026-3288 （CVSS 8.8 HIGH）- NGINX Ingress Controller における設定インジェクション 影響を受けるバージョン : v1.13.8、v1.14.4、v1.15.0 攻撃ベクトル : パス設定における二重引用符（"）インジェクション 影響 :...

cve-2024-4577

CVE-2024-4577 脆弱性テストスクリプト このPythonスクリプトは、PHPの最新の脆弱性であるCVE-2024-4577を診断するためのシンプルなPoC（Proof of Concept）ツールです。 ⚠️ 本ツールはセキュリティ診断目的 で提供されており、自分が所有するシステム または事前に許可を得た対象にのみ使用 してください。 📌 概要 この脆弱性は、PHPがWindows環境でCGIモードで動作する際に、マルチバイト文字のバイパスを利用して 任意のPHP設定を注入し、コード実行を誘発できる問題です。...

USN-8814-1: Octavia vulnerabilities

It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...

USN-8814-1 octavia vulnerabilities

It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

CVE-2026-85475 Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslog component

A flaw was found in the Ansible Automation Platform automation controller. The external logging rsyslog configuration is generated by interpolating user-controlled settings — LOGAGGREGATORHOST, LOGAGGREGATORMAXDISKUSAGEPATH and LOGAGGREGATORRSYSLOGDERRORLOGFILE — into an rsyslog RainerScript conf...

Linux Distros Unpatched Vulnerability : CVE-2026-94572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is...

Linux Distros Unpatched Vulnerability : CVE-2026-94571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirecturl and redirectprefix fields. The RF...

CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2026-94571

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirecturl and redirectprefix fields. The RFC 3986 URL validator percent-encodes control characters before validating, and thus newlines passed structural checks, but Octavia stored...

CVE-2026-94572

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2026-94572: Improper Control of Generation of Code

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...

CVE-2023-33246

CVE-2023-33246 - RocketMQ リモートコード実行 CVE-2023-33246 - Apache RocketMQ 設定によるリモートコード実行エクスプロイト 概要 RocketMQ は分散型メッセージングおよびストリーミングプラットフォームです。 RocketMQ バージョン 5.1.0 以下は、任意のコードインジェクションに対して脆弱です。RocketMQ の Broker コンポーネントが外部ネットワークに漏洩し、アクセス許可の検証が不足しています。攻撃者は設定更新機能を利用して、RocketMQ...