GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, nfs-subdir-external-provisioner, timescaledb-tune, tofu-controller, docker-machine-driver-linode, harbor, vertical-pod-autoscaler, vitess, falcosidekick-fips, rancher-loglevel, kubescape-operator-fips, azure-aad-pod-identity-mic, skopeo,...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

Exploit for Use After Free in Redis

CVE-2025-49844 My personal proof-of-concept for CVE-2025-498...

EUVD-2024-55054

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input by an authenticated administrator enables shell metacharacter injection that is incorporated into backend command invocations, allowing arbitrary com...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

GO-2025-4077 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.2, which stems from insufficient...