13575 matches found
Exploit for CVE-2025-25599
CVE-2025-25599 Details Bolt is an o...
CVE-2024-45337 affecting package docker-compose for versions less than 2.27.0-2
CVE-2024-45337 affecting package docker-compose for versions less than 2.27.0-2. A patched version of the package is available...
CVE-2024-41454: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file...
CVE-2024-41453: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2024-41453
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
PT-2025-2607
Name of the Vulnerable Software and Affected Versions Process Maker pm4core-docker version 4.1.21-RC7 Description The issue is related to an arbitrary file upload vulnerability in the UI login page logo upload function. This allows attackers to execute arbitrary code by uploading a crafted PHP or...
PT-2025-2606
Name of the Vulnerable Software and Affected Versions Process Maker pm4core-docker version 4.1.21-RC7 Description A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. This issue enables attackers...
ProcessMaker security vulnerabilities
ProcessMaker is a Php-written website builder for business process management BPM and workflow management from ProcessMaker Inc. in the United States. A security vulnerability exists in ProcessMaker pm4core-docker version 4.1.21-RC7, which originates from an arbitrary file upload vulnerability in...
Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins
Intro This is an exploit for CVE-2024-43044, an arbitrary fil...
MGASA-2025-0004 Updated opencontainers-runc packages fix security vulnerability
runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...
Updated opencontainers-runc packages fix security vulnerability
runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...
Exploit for Race Condition in Openbsd Openssh
Summary This is essentially a statistical vulnerability: a la...
ZenML < 0.57.1 DoS (CVE-2024-4460)
The version of ZenML installed on the remote host is prior to 0.57.1. It is, therefore, affected by a denial of service DoS vulnerability exists in zenml-io/zenml version due to improper handling of line feed \n characters in component names. When a low-privileged user adds a component through th...
ZenML < 0.56.3 Unpatched Session Expiration Exposure (CVE-2024-4680)
The version of ZenML installed on the remote host is prior to 0.56.3. It is, therefore, affected by a vulnerability which allows attackers to reuse old session credentials or session IDs due to insufficient session expiration. Specifically, the session does not expire after a password change,...
CVE-2024-45497
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...
CVE-2024-45497
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...
CVE-2024-45497
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...
CVE-2024-45497 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...
CVE-2024-45497: Incorrect Permission Assignment for Critical Resource
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from private repositories...