91122 matches found
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Portainer container management platform, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from improper code generation management. This allows attackers to execute arbitrary code.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the configuration processor for protected branches of the Git-based software platform, which allows a hacker to modify the configuration of protected branches.
The vulnerability of the configuration processor for protected branches in the git-based software platform, which is used for collaborative code development in GitLab CE/EE, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform allows a malicious actor to alter the configuration of CI/CD processes. This vulnerability enables a hacker to modify the setup of CI/CD workflows.
The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...
The vulnerability of the mechanism for generating headers of confidential issues in a software platform based on Git for collaborative code development in GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for generating headers of confidential issues in a Git-based software platform for collaborative code development on GitLab CE/EE is related to the disclosure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to...
Fedora 44 : php (2026-6131a972fe)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6131a972fe advisory. PHP version 8.5.9 30 Jul 2026 Core: Fixed bug GH-22290 AST pretty printing does not correctly handle strings containing NUL. iliaal Fixed bug GH-222...
openSUSE 16 Security Update : hawk-apiserver (openSUSE-SU-2026:21457-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21457-1 advisory. Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 bsc1267454 Version 0.1.0+git.1773234993.db3c82f: handle...
SUSE SLED15 / SLES15 Security Update : python-sh (SUSE-SU-2026:3422-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3422-1 advisory. - CVE-2026-54552: incomplete privilege drop in the uid option can allow a subprocess to retain parent supplementary...
Exploit for CVE-2026-60004
🚨 CVE-2026-60004 - RCE Critical Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...
Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File...
Exploit for CVE-2026-61424
CVE-2026-61424 — DJ-Classifieds imageupload Task → No Auth → 3-...
LogSentry
LogSentry !CIhttps://github.com/AlperEnesErsu/LogSentry/a...
SUSE CVE-2026-25119
Gogs is an open source self-hosted Git service. Prior to 0.14.3, when ENABLEREVERSEPROXYAUTHENTICATION is enabled, Gogs accepts the configured authentication header default: X-WEBAUTH-USER directly from client requests without validating that the request originated from a trusted reverse proxy. A...
SUSE CVE-2026-28740
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access...
SUSE CVE-2026-28744
Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks...
SUSE CVE-2026-33762
go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git's index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path name. A maliciously crafted index file can trigger an...
SUSE CVE-2026-42295
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials S3 access keys, secret keys, GCS service account keys, Azure account keys, Gi...
SUSE CVE-2026-44477
CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local Unix socket, then demotes the session with SET ROLE...