12299 matches found
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, skaffold, teleport, ko, spire-server, rekor, aactl, zot, falcoctl, goreleaser, kubescape, tkn, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf, docker, policy-controller,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, witness, trivy, skaffold, teleport, ko, spire-server, rekor, aactl, zot, falcoctl, goreleaser, kubescape, tkn, vexctl, slsa-verifier, buildkitd, tekton-chains, gitsign, tflint, neuvector-sigstore-interface, zarf, docker, policy-controller,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: spegel, kyverno-policy-reporter-ui, nats-server, neuvector-scanner, osv-scanner, crane, redka, opa, govulncheck, paranoia, src-fingerprint, metrics-server, bom, dockerize, rabbitmq-default-user-credential-updater, delve, eksctl, rekor, aactl, atlantis, wireguard-go,...
ReconTitan
A security-hardened platform for external reconnaissance, OSIN...
VulnCheck KEV: CVE-2026-45298
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy the documented quickstart, no DOZZLEAUTHPROVIDER set, POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a WebhookDispatcher that...
wp-forge
wp-forge wp-forge scans WordPress.org plugins for serious PHP...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...
ai-threat-detection
css █████╗ ███╗ ██╗ ██████╗ ███████╗██╗ ██╗ ██╗█████...
django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73624 via gitpython (1.0.1)
gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...
django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73622 via gitpython (1.0.1)
gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...
django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73621 via gitpython (1.0.1)
gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...
CVE-Web-Framework
Web Framework CVE Vulnerability Reproduction Testbed Warn...
CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
PT-2026-71423
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description A sandbox escape exists in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the '/api/v1/node-custom-function' endpoint can escape the sandbox by providing...
CVE-2026-73519
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
iris-web v2.4.29
Incident Response Investigation System Current Version v2.4.20 Online Demonstration IRIS Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Table of contents Getting Started Run IrisWeb Configuration Versioning Showcase...
