Exploit for Files or Directories Accessible to External Parties in Apache Struts

CVE-2023-50164 PoC This repository is a proof of concept PoC...

openshift4/ose-docker-builder Privilege Escalation

The vulnerability of the openshift4/ose-docker-builder component of the Red Hat OpenShift Container Platform is related to errors in privilege management. This allows a malicious actor to escalate their privileges on the node where containers are executed...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

com.cloudcoreo.plugins:cloudcoreo-deploytime (>=0.1.0, <=0.2.3), com.github.kostyasha.yet-another-docker:yet-another-docker-plugin (>=0.1.0-rc16, <=0.2.0) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.3)

org.jenkins-ci.plugins:credentials MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.cloudcoreo.plugins:cloudcoreo-deploytime =0.1.0, =0.1.0-rc16, =0.1-beta, =0.4 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.2), com.nirima.jenkins.repository:pom (1.2) +7 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.546)

org.jenkins-ci.main:jenkins-core MAVEN version 1.546 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.2 - com.nirima.jenkins.repository:pom 1.2 ...

com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.638)

org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.555)

org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...

org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.555)

org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=4.8, <=4.18), org.jenkins-ci.plugins:docker-build-step (2.8) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.3.19)

org.jenkins-ci.plugins:credentials MAVEN version 2.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =4.8, =1.9.0, =1.9.2 Source cves:...

DEBIAN-CVE-2024-9407

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories...

ALPINE-CVE-2024-9407

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories...

UBUNTU-CVE-2024-9407

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensitive directories...

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

Cybersecurity researchers have uncovered a new cryptojacking campaign targeting the Docker Engine API with the goal of co-opting the instances to join a malicious Docker Swarm controlled by the threat actor. This enabled the attackers to "use Docker Swarm's orchestration features for...

PT-2024-7952

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Podman affected versions not specified Buildah affected versions not specified Description A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction, where the system...

Exploit for Deserialization of Untrusted Data in Givewp

This post is a research article published by EQSTLabhttps://g...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components.This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

Exploit for CVE-2024-38816

CVE-2024-38816 Proof of Concept PoC This is a proof of conc...

GLSA-202409-29 : Docker: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-29 Docker: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Docker. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...