CVE-2025-55182

CVE-2025-55182 root@kitploit: POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...

Node.js-CVE-2024-39943

Vulnerabilidad de ejecución de comandos en HFS basado en Node.js CVE-2024-39943 Escuela White Hat 3ª promoción – 노정민 @JenmrR Resumen En el entorno del servidor HFS basado en Node.js, existe una vulnerabilidad que ejecuta el contenido de los archivos subidos mediante childprocess.execSync. Un...

Info-Sys-Security-CVE-2025-55182

CVE-2025-55182 Laboratorio de Seguridad "React2Shell" Este repositorio contiene un laboratorio académico local para analizar CVE-2025-55182 en un entorno controlado de React Server Components. El laboratorio simula la vulnerabilidad, su explotación y el parche aplicado. 📁 Estructura del Repositor...

Suricata-Rule-for-Detecting-CVE-2025-55182

Suricata Detection Rule for CVE‑2025‑55182 Next.js Action Poisoning → Node.js execSync RCE 📌 Description This document explains how Suricata rule SID 900304 detects exploitation attempts of CVE‑2025‑55182 , a critical vulnerability in Next.js that enables Action Poisoning leading to arbitrary...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner Una utilidad de explotación completa para CVE-2025-55182 — Ejecución Remota de Código a través de Componentes del Servidor React en Next.js. El escáner crea automáticamente el payload multiparte y abusa de process.mainModule.require'childprocess'.execSync para logr...

CVE-2024-39943-Poc

CVE-2024-39943-Poc CVE-2024-39943 rejetto HFS también conocido como HTTP File Server 3 anterior a 0.52.10 en Linux, UNIX y macOS permite la ejecución de comandos del sistema operativo por parte de usuarios remotos autenticados si tienen permisos de Upload. Esto ocurre porque se utiliza un shell...

Containerd < 1.7.35 / 2.0.x < 2.0.12 / 2.2.x < 2.2.8 / 2.3.x < 2.3.5 DoS

The version of Containerd on the remote host is prior to 1.7.35, 2.0.x prior to 2.0.12, 2.2.x prior to 2.2.8, or 2.3.x prior to 2.3.5. It is, therefore, affected by a denial of service vulnerability. containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO...

GO-2026-6444 containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd...

CVE-2026-53495

A flaw was found in containerd. When the Container Runtime Interface CRI plugin is enabled on Linux, repeated use of CRI ExecSync by exec probes or lifecycle hooks can cause goroutines to become indefinitely blocked. This leads to resource exhaustion and can terminate the containerd process, maki...

Linux Distros Unpatched Vulnerability : CVE-2026-53495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely bloc...

CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495 containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495

containerd on Linux with the CRI plugin enabled is affected by a goroutine leak in drainExecSyncIO (internal/cri/server/container_execsync.go). When exec probes or lifecycle hooks launch long-lived background child processes that retain stdin/stdout pipes, the input/output drain phase—lacking a d...

CVE-2026-53495

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-53495 containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

EUVD-2026-77684

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/containerexecsync.go when CRI ExecSync is used by exec probes or lifecycle hooks...

CVE-2026-59960

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...

CVE-2026-59960

@argos-ci/core versions prior to 6.2.1 contain an OS Command Injection (CWE-78) in the gitFetch() and gitMergeBase() functions within packages/core/src/ci-environment/git.ts. When a project has hasRemoteContentAccess: false (the default without a Git provider integration), attacker-controlled bra...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...