CVE-2026-108728 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

CVE-2026-108728

Flyte versions 2.0.1 through 2.0.51 are vulnerable to a cleartext secret exposure vulnerability within the embedded secret manager webhook . The root cause is that the webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable . This allows users with Pod read ...

Authorization Bypass Through User-Controlled Key

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the addnewmodel and canusermaketeammodelcall functions in modelmanagementendpoints.py, which authorize the caller by rol...

sitrep

SitRep Triaje de host extensible y configurable. Propósito SitRep pretende proporcionar una alternativa ligera y extensible para el triaje de hosts. Las comprobaciones se cargan dinámicamente en tiempo de ejecución desde archivos independientes. Esto permite a los operadores modificar rápidamente...

hontel

HonTel HonTel es un Honeypot para el servicio Telnet. Básicamente, es una aplicación Python v2.x que emula el servicio dentro del entorno chroot. Originalmente fue diseñado para ejecutarse en entornos Ubuntu/Debian, aunque se puede adaptar fácilmente para cualquier entorno Linux. Documentation:...

cheat-engine

Cheat Engine Cheat Engine es un entorno de desarrollo centrado en la modificación de juegos y aplicaciones para uso personal. Descarga Ultima versión Versiones antiguas Enlaces Website Forum Forum alternativo Wiki Redes sociales Reddit Twitter Donaciones Patreon PayPal Instrucciones de compilació...

testenv

Entorno de pruebas de inyección SQL Una colección de páginas web vulnerables a fallos de inyección SQL y más: conf/ - archivos de configuración del sistema operativo utilizados por deployment.sh. dbs/ - bases de datos independientes para algunos sistemas de gestión de bases de datos p. ej...

kubernetes-goat

Kubernetes Goat ✨ Il Kubernetes Goat è progettato per essere un ambiente cluster intenzionalmente vulnerabile per imparare e praticare la sicurezza di Kubernetes 🚀 🙌 Fai riferimento a https://madhuakula.com/kubernetes-goat per la guida 📖 🧰 Configurazione di Kubernetes Goat Assicurati di avere...

NodeGoat

NodeGoat Essendo leggero, veloce e scalabile, Node.js sta diventando una piattaforma ampiamente adottata per lo sviluppo di applicazioni web. Questo progetto fornisce un ambiente per apprendere come i rischi di sicurezza OWASP Top 10 si applicano alle applicazioni web sviluppate con Node.js e com...

CVE-2026-108728: Cleartext Storage of Sensitive Information

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

CVE-2026-108978: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

like-dbg

LIKE-DBG LIKE-DBG LI nux-KE rnel-D e B u G ger mira ad automatizzare i passaggi noiosi quando si cerca di impostare un ambiente di debug del kernel Linux. Ho deciso di addentrarmi nella ricerca sullo sfruttamento del kernel e ho trovato le soluzioni esistenti non abbastanza utilizzabili. Pertanto...

CLEANSTART-2026-ZG38480 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope

Security vulnerability affects the airflow-3 package. Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...

CLEANSTART-2026-PK17424 In an untrusted JMS environment, org

Security vulnerability affects the apache-nifi package. In an untrusted JMS environment, org...

Linux Distros Unpatched Vulnerability : CVE-2026-107818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit...

CVE-2026-108259

Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in...

CVE-2026-108259 Tina: Code injection via unescaped Git branch name in generated client source

Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in...

CVE-2026-108259

The headless content management system Tina contains a code injection vulnerability in versions prior to 3.0.0 . The @tinacms/cli component fails to sanitize Git branch names retrieved from environment variables like VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD. These raw values are interpolated...

CVE-2026-108259 Tina: Code injection via unescaped Git branch name in generated client source

Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in...