1997 matches found
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...
CVE-2026-88021
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-88021
Consul and Consul Enterprise contain an authorization bypass in the Connect service mesh . When generating Envoy RBAC rules to enforce Connect intentions, Consul failed to correctly escape certain characters in service names , namespaces , and partitions , causing the resulting authorization rule...
EUVD-2026-75700
Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul did not correctly escape certain characters in...
CVE-2026-49975-HTTP-2-Bomb
A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...
GO-2026-4942 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, portieris, envoy-gateway, gitness, zot, kots...
GO-2026-4506 vulnerabilities
Vulnerabilities for packages: opa-fips-envoy, opa-envoy...
GO-2025-3418 vulnerabilities
Vulnerabilities for packages: envoy-gateway...
GO-2026-4771 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, gitlab-elasticsearch-indexer-fips, vault, gitaly, teleport, vault-fips, commercial-grafana, gitlab-elasticsearch-indexer...
GO-2026-4772 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, k3s, kine, commercial-expanso-edge, envoy-gateway, kots, commercial-chainloop-backend, commercial-grafana, spire-server...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: tigera-operator, xeol-fips, vcluster-fips, gatekeeper, ratify-fips, helm-exporter, tigera-operator-fips, maru, steampipe, cloudbeat, ocm-kubernetes-controller-fips, kubescape-server, cluster-api-helm-controller-fips, k9s, consul-k8s, helm-mapkubeapis, oras, kube-mgmt...
GO-2026-5094 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...
GO-2026-5185 vulnerabilities
Vulnerabilities for packages: envoy-gateway-fips, portieris, argocd-image-updater, gitlab-rails-ce-fips, envoy-gateway, gitlab-rails-ce, portieris-fips, kots, gitness, argocd-image-updater-fips, zot...
GO-2026-4985 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, traefik-fips, opa-envoy, kubo-fips, splunk-otel-collector, grafana-rollout-operator, cg, gitlab-cng-fips, docker-cli-buildx-fips, falcosidekick, elastic-agent-fips, gatekeeper, hydra-fips, knative-eventing-fips, hubble, kube-logging-operator, loki,...