egg-scripts-CVE-2018-3786

egg-scripts deploy tool for egg project. Note: Windows is partially supported, see22 Install $ npm i egg-scripts --save Usage Add eggctl to package.json scripts: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Then run as: npm start npm stop Note: egg-scripts is not recommended...

pgAdminOpendoor

pgAdminOpendoor CVE-2025-2945 Overview This is my research on CVE-2025-2945. This repo includes a test stand with postgress and vulnerable pgadmin, and exploit. CVE Usefull links: NVD Details WIZ Analyze Metasploit Breakdown In pgAdmin backend, which is written in python, there are two endpoint...

CVE-2018-11788

Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...

CVE-2026-116068

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to...

EUVD-2026-109382

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to...

nimbostratus-target

Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...

deploy-goad

Deploy GOAD v2 on Ubuntu Linux 22.04 This script streamlines the prerequisites needed when deploying the Active Directory lab provided by https://github.com/Orange-Cyberdefense/GOAD High level description Ensure computer has VTx extensions enabled in BIOS Install Ubuntu Server 22.04 Configure...

PT-2026-122971

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.30.11 Description An authorization bypass allows owners or administrators of any organization to control applications belonging to other tenants by providing foreign applicationId values. This allows unauthorized...

cdt-samba-deploy

cdt-samba-deploy CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box...

CVE-2026-115885 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who ca...

CVE-2026-115885

The LangGraph CLI (versions 0.4.15 through 0.4.32 ) contains a vulnerability where the langgraph deploy --verbose command prints a temporary registry push token to the standard output. This occurs because the CLI's subprocess helper prints command input in verbose mode while passing the token to ...

CVE-2026-115885 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who ca...

CLSA-2026-1792769794 flatpak: Fix of CVE-2026-97023

CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious ostree commit with "export" as a symlink made the path-based export/bin cleanup delete files at the symlink target...

CLSA-2026-1792769619 flatpak: Fix of CVE-2026-97023

CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious ostree commit with "export" as a symlink made the path-based export/bin cleanup delete files at the symlink target...

CVE-2025-65200

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

CVE-2026-114665

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...

CVE-2026-114665

Goploy versions 1.18.0 before 1.18.1 are vulnerable to a link following vulnerability within the /deploy/fileDiff and /deploy/fileCompare endpoints. This flaw allows authenticated members to perform arbitrary file reads . Specifically, an attacker with repository write access can commit a symlink...

CVE-2026-114665 Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...

EUVD-2026-108121

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read...