GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: govulncheck, manifest-tool, kind, oras-fips, container-object-storage-interface-fips, yunikorn-k8shim-fips, fulcio-fips, helm-mapkubeapis, falcosidekick-fips, jaeger, velero-plugin-for-aws-fips, octo-sts, helm-docs, azuredisk-csi-fips, kyverno, age-fips,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: govulncheck, manifest-tool, cyberark-secrets-provider-for-k8s, kind, oras-fips, container-object-storage-interface-fips, yunikorn-k8shim-fips, fulcio-fips, helm-mapkubeapis, falcosidekick-fips, velero-plugin-for-aws-fips, octo-sts, helm-docs, azuredisk-csi-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: govulncheck, manifest-tool, cyberark-secrets-provider-for-k8s, kind, oras-fips, container-object-storage-interface-fips, yunikorn-k8shim-fips, fulcio-fips, helm-mapkubeapis, falcosidekick-fips, jaeger, velero-plugin-for-aws-fips, octo-sts, helm-docs,...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

Exploit for CVE-2024-7387

overview cve-2024-7387https://nvd.nist.gov/vuln/detail/C...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

Exploit for Use After Free in Redis

CVE-2025-49844 My personal proof-of-concept for CVE-2025-498...

EUVD-2024-55054

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input by an authenticated administrator enables shell metacharacter injection that is incorporated into backend command invocations, allowing arbitrary com...

GO-2025-4077 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

PT-2025-44504

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.2 Description Nagios XI versions prior to 2024R1.2 have a command injection issue in the Docker Wizard. A lack of proper input validation allows a user with administrator privileges to inject shell...

PT-2025-45876

Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations in github.com/docker/compose...

CVE-2024-14005: Improper Neutralization of Special Elements used in an OS Command

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.2, which stems from insufficient...

Exploit for CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A...

SUSE CVE-2025-62725

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker-supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cac...