CVE-2024-4323

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Мы требуем безопасного возвращения всех граждан, взятых в заложники террористической группировкой ХАМАС. Мы не успокоимся, пока каждый заложник не будет освобождён и не вернётся домой в безопасности. Вы можете помочь вернуть их...

CVE-2024-23722-poc

CVE-2024-23722-poc Использование root@kitploit: python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently no...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC この概念実証スクリプトは、Fluent Bit におけるメモリ破損の脆弱性 CVE-2024-4323 を利用してリモートコード実行を可能にする方法を示しています。 CVE-2024-4323 は、Fluent Bit バージョン 2.0.7 から 3.0.3 におけるメモリ破損の脆弱性です。この問題は、組み込み HTTP サーバーによるトレースリクエストの解析に存在し、サービス妨害 DoS 状態、情報漏洩、またはリモートコード実行 RCE を引き起こす可能性があります MITRE CVE Launchpad。...

AZL-97458 CVE-2026-72854 affecting package fluent-bit 3.1.10-6

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, go, nvidia-nsight-compute-13.0, newrelic-fluent-bit-output, nvidia-nsight-compute-12.9, nvidia-nsight-compute-12.8, kubeflow-katib...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, newrelic-fluent-bit-output, kubeflow-katib...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, cloud-sql-proxy-fips, minio-operator, beats-fips, metrics-server, minio-operator-fips, opentelemetry-collector, jaeger-fips, fluent-bit-plugin-loki, opentelemetry-collector-k8s, trillian, datadog-agent, elastic-agent,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, knative-operator, cluster-api-azure-controller-fips, opentelemetry-collector-contrib, jobset-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt, secrets-store-csi-driver-fips, dcgm-exporter-fips, influxd,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib, newrelic-fluent-bit-output...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: falcosidekick, atlantis, authservice, oauth2-proxy, splunk-otel-collector, kots, fluent-bit-plugin-loki, gitea...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: grafana, istio, datadog-agent, prometheus-operator, jaeger, keda, amazon-cloudwatch-agent-operator, minio, metrics-server, loki, node-problem-detector, karma, prometheus-pushgateway, tempo, opentelemetry-collector, cloud-sql-proxy, k8sgpt, trillian, prometheus, mc,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

CLEANSTART-2026-AA56293 Security fixes in fluent-bit-plugin-loki 3.6.5-r0

Package fluent-bit-plugin-loki version 3.6.5-r0 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186...

CVE-2025-63652 affecting package fluent-bit for versions less than 3.1.10-6

CVE-2025-63652 affecting package fluent-bit for versions less than 3.1.10-6. A patched version of the package is available...

CVE-2026-58055 affecting package fluent-bit for versions less than 3.1.10-6

CVE-2026-58055 affecting package fluent-bit for versions less than 3.1.10-6. A patched version of the package is available...

CVE-2025-63657 affecting package fluent-bit for versions less than 3.1.10-5

CVE-2025-63657 affecting package fluent-bit for versions less than 3.1.10-5. A patched version of the package is available...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kyverno, fscrypt, k8s-device-plugin, gitlab-kas, runc, kubernetes-dashboard, libnvidia-container, telegraf, istio, kaf, chezmoi, prometheus-operator, k3s, gitaly, kubernetes, cert-manager, cilium, external-secrets-operator, cloud-provider-aws, dask-gateway, aactl,...

CLEANSTART-2026-CG86499 Security fixes for CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.6.5-r0

Multiple security vulnerabilities affect the fluent-bit-plugin-loki package. These issues are resolved in later releases. See references for individual vulnerability details...