POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner Полнофункциональная утилита для эксплуатации CVE-2025-55182 — удаленное выполнение кода через React Server Components в Next.js. Сканер автоматически создает multipart-полезную нагрузку и использует process.mainModule.require'childprocess'.execSync для выполнения...

CVE-2024-39943-Poc

CVE-2024-39943-Poc CVE-2024-39943 rejetto HFS также известный как HTTP File Server версии 3 до 0.52.10 на Linux, UNIX и macOS позволяет удаленным аутентифицированным пользователям если у них есть права на загрузку выполнять команды ОС. Это происходит потому, что для выполнения df используется...

CVE-2025-55182

CVE-2025-55182 POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...

Node.js-CVE-2024-39943

Node.js HFS 명령어 실행 취약점 CVE-2024-39943 Школа WhiteHat, 3-й набор – Но Джонмин @JenmrR Краткое описание В среде сервера HFS на базе Node.js существует уязвимость, при которой содержимое загруженного файла выполняется через childprocess.execSync. Злоумышленник может напрямую выполнять команды ОС чер...

Info-Sys-Security-CVE-2025-55182

CVE-2025-55182 Security Lab "React2Shell" Этот репозиторий содержит локальную академическую лабораторию для анализа CVE-2025-55182 в контролируемой среде React Server Components. Лаборатория моделирует уязвимость, её эксплуатацию и применённый патч. 📁 Структура репозитория Основные приложения...

Suricata-Rule-for-Detecting-CVE-2025-55182

Правило обнаружения Suricata для CVE‑2025‑55182 Отравление действий Next.js → RCE через execSync в Node.js 📌 Описание В этом документе объясняется, как правило Suricata SID 900304 обнаруживает попытки эксплуатации CVE‑2025‑55182 , критической уязвимости в Next.js, которая позволяет выполнить...

Containerd < 1.7.35 / 2.0.x < 2.0.12 / 2.2.x < 2.2.8 / 2.3.x < 2.3.5 DoS

The version of Containerd on the remote host is prior to 1.7.35, 2.0.x prior to 2.0.12, 2.2.x prior to 2.2.8, or 2.3.x prior to 2.3.5. It is, therefore, affected by a denial of service vulnerability. containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO...

GO-2026-6444 containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd...

CVE-2026-53495

A flaw was found in containerd. When the Container Runtime Interface CRI plugin is enabled on Linux, repeated use of CRI ExecSync by exec probes or lifecycle hooks can cause goroutines to become indefinitely blocked. This leads to resource exhaustion and can terminate the containerd process, maki...

Linux Distros Unpatched Vulnerability : CVE-2026-53495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely bloc...

CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495

containerd on Linux with the CRI plugin enabled is affected by a goroutine leak in drainExecSyncIO (internal/cri/server/container_execsync.go). When exec probes or lifecycle hooks launch long-lived background child processes that retain stdin/stdout pipes, the input/output drain phase—lacking a d...

CVE-2026-53495 containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

EUVD-2026-77684

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495 containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-59960

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...

CVE-2026-59960

@argos-ci/core versions prior to 6.2.1 contain an OS Command Injection (CWE-78) in the gitFetch() and gitMergeBase() functions within packages/core/src/ci-environment/git.ts. When a project has hasRemoteContentAccess: false (the default without a Git provider integration), attacker-controlled bra...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...