Lucene search
K

9236 matches found

GithubExploit
GithubExploit
•added 2025/11/25 9:52 a.m.•173 views

webVuln-scanner

WebVuln Scanner An advanced web vulnerability scanner with cu...

7.5AI score
Exploits0
GithubExploit
GithubExploit
•added 2025/11/25 7:32 a.m.•159 views

Exploit for Unrestricted Upload of File with Dangerous Type in Skittles Employee_Records_System

CVE-2021-4462 Test Environment Docker-based test environment...

9.8CVSS7.3AI score0.02988EPSS
Exploits2
Fedora
Fedora
•added 2025/11/25 1:42 a.m.•7 views

[SECURITY] Fedora 42 Update: podman-5.7.0-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

7.5CVSS7.1AI score0.00626EPSS
Exploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/25 12:0 a.m.•2 views

Fedora 43 : docker-buildkit (2025-264853458b)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-264853458b advisory. Update to release v0.26.1 ---- - Update to release v0.26.0 - Resolves: rhbz2412681, rhbz2412761 - Upstream new features and fixes - dependency...

4.3CVSS7.8AI score0.00419EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/25 12:0 a.m.•3 views

Fedora 43 : docker-buildx (2025-b1d7d7f8db)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b1d7d7f8db advisory. - Update to release v0.30.1 - Upstream fix ---- - Update to release v0.30.0 - Resolves: rhbz2413270 - Resolves: rhbz2407614, rhbz2407881, rhbz240815...

7.5CVSS7.3AI score0.00626EPSS
Exploits0References6
CBLMariner
CBLMariner
•added 2025/11/24 10:21 p.m.•9 views

CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8

CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8. A patched version of the package is available...

7.5CVSS6.5AI score0.00579EPSS
Exploits1
CBLMariner
CBLMariner
•added 2025/11/24 10:21 p.m.•9 views

CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6

CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6. A patched version of the package is available...

7.5CVSS6.5AI score0.00579EPSS
Exploits1
NVD
NVD
•added 2025/11/24 3:15 p.m.•4 views

CVE-2025-12970

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

8.8CVSS0.00788EPSS
Exploits0References2
OSV
OSV
•added 2025/11/24 3:15 p.m.•4 views

AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

8.8CVSS6.2AI score0.00788EPSS
Exploits0References1
OSV
OSV
•added 2025/11/24 3:15 p.m.•8 views

AZL-71111 CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

8.8CVSS6.2AI score0.00788EPSS
Exploits0References1
OSV
OSV
•added 2025/11/24 3:15 p.m.•3 views

CVE-2025-12970

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

8.8CVSS7.9AI score
Exploits0References2
Cvelist
Cvelist
•added 2025/11/24 2:39 p.m.•8 views

CVE-2025-12970 CVE-2025-12970

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

0.00788EPSS
Exploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/24 2:39 p.m.•2 views

CVE-2025-12970 CVE-2025-12970

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

7.6AI score0.00788EPSS
Exploits0References2
EUVD
EUVD
•added 2025/11/24 2:39 p.m.•5 views

EUVD-2025-198809

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

8.8CVSS7.5AI score0.00788EPSS
Exploits0References2
CVE
CVE
•added 2025/11/24 2:39 p.m.•27 views

CVE-2025-12970

The CVE-2025-12970 detail describes a vulnerability in Fluent Bit: the extract_name function in the in_docker input plugin copies container names into a fixed-size stack buffer without validating length, allowing an attacker who can create or name containers to supply a long name that overflows t...

8.8CVSS7.6AI score0.00788EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:0 a.m.•5 views

PT-2025-47921

Name of the Vulnerable Software and Affected Versions Fluent Bit versions affected versions not specified Description The extract name function within the in docker input plugin of Fluent Bit contains a buffer overflow issue. This occurs because the function copies container names into a fixed-si...

8.8CVSS7.6AI score0.00788EPSS
Exploits0References18
GithubExploit
GithubExploit
•added 2025/11/22 1:13 a.m.•142 views

lab-sqli-v1

šŸ” Laboratorio de SQL Injection - Del Principiante al Experto...

7.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/20 12:0 a.m.•8 views

TencentOS Server 4: moby (TSSA-2024:0335)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0335 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

9.9CVSS7.5AI score0.16496EPSS
Exploits0References2
GithubExploit
GithubExploit
•added 2025/11/18 2:24 p.m.•210 views

Exploit for Double Free in Openbsd Openssh

CVE-2023-25136 Vulnerability Demonstration This project provi...

6.5CVSS7.6AI score0.89955EPSS
Exploits10
OSV
OSV
•added 2025/11/17 7:6 p.m.•4 views

GHSA-V5W9-PRXF-W882 Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)

Summary An unauthenticated attacker can exploit the unprotected registration endpoint /register to create a new user and bypass authentication. Details Critical vulnerability in Flowise 3.0.1 on-premise deployment allows unauthenticated attackers to exploit the /api/v1/account/register endpoint t...

8.7CVSS7.3AI score
Exploits0References2
Rows per page
Query Builder