CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: apache-hop, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, confluent-kafka, apache-hop-fips, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, hadoop-fips, spark, zookeeper, tez, pinot-fips, apache-camel-karavan-devmode,...

CVE-2026-40022 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-27VM-5VPJ-RP5G vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground

Admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other sensitive configuration data, in addition to running the hashData signing function. This issue was mitigated in versions 3.7.2 and 2.15.2 by disabling...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

Quarkus DevMode Enabled

Quarkus installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...

CraftCMS DevMode Enabled

CraftCMS installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , … because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype. Recent assessments: ANHKWAR at Ma...

Flaw in snapd Allows Root Access to Linux Servers

A local privilege-escalation vulnerability in Canonical’s snapd package has been uncovered, which would allow any user to obtain administrator privileges and immediate root access to affected Linux system servers. Snapd is used by Linux users to download and install apps in the .snap file format...

snapd 2.37 (Ubuntu) dirty_sock Local Privilege Escalation

!/usr/bin/env python3 """ dirtysock: Privilege Escalation in Ubuntu via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available...

snapd 2.37 (Ubuntu) dirty_sock Local Privilege Escalation

!/usr/bin/env python3 """ dirtysock: Privilege Escalation in Ubuntu via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available...

snapd < 2.37 (Ubuntu) - dirty_sock Local Privilege Escalation (2)

Exploit for linux platform in category local exploits !/usr/bin/env python3 """ dirtysock: Privilege Escalation in Ubuntu via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains t...

snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (1)

!/usr/bin/env python3 """ dirtysock: Privilege Escalation in Ubuntu via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available...

Apache Struts 2 DevMode Enabled

Apache Struts 2 installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications as well as the installation of Struts, Java, and other related...