GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: pgpool2exporter-fips, kubescape-operator-fips, wgcf, cloud-provider-aws-fips, kubernetes-csi-external-attacher-fips, promxy-fips, harbor-registry-fips, kubernetes-secret-generator, cloud-provider-azure, gops, rancher-agent, etcd, google-guest-agent, velero,...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

Exploit for Use After Free in Redis

CVE-2025-49844 My personal proof-of-concept for CVE-2025-498...

EUVD-2024-55054

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input by an authenticated administrator enables shell metacharacter injection that is incorporated into backend command invocations, allowing arbitrary com...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

GO-2025-4077 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.2, which stems from insufficient...

PT-2025-44504

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2 Description Nagios XI versions prior to 2024R1.2 have a command injection issue in the Docker Wizard. A lack of proper input validation allows a user with administrator privileges to inject shell...