GO-2026-4340 vulnerabilities

Vulnerabilities for packages: runc, local-static-provisioner, kapp, ctop, mesosphere-vsphere-csi, sonobuoy, crossplane-provider-azure-sql, s5cmd, cilium-cli, azure-workload-identity-webhook, grafana-rollout-operator, ingress-nginx-controller, crossplane-provider-sql,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kapp, nri-apache, containerd, buildkitd, flux, docker-machine-driver-harvester, cilium-cli, grafana-rollout-operator, witness, amazon-cloudwatch-agent-operator, kor, gcsfuse, caddy, tekton-chains, portieris, kubernetes-dashboard-api, kubernetes-dashboard-auth, k3d,...

CLEANSTART-2026-IK47334 Security fixes in kor 0.3.8-r1

Package kor version 0.3.8-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-YC34389 Security fixes in kor 0.5.9-r1

Package kor version 0.5.9-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-XY20765 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TB18047 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH72202 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

CLEANSTART-2026-HV96032 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-OL12277 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-MD91760 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: ctop, flux, cluster-api-aws-controller, juicefs-csi-driver, opa-envoy, dapr, vcluster, logstash-exporter, docker-compose, fscrypt, docker-machine-driver-harvester, aws-node-termination-handler, oras, spiffe-helper, smokescreen, git-lfs, witness,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: ctop, flux, cluster-api-aws-controller, juicefs-csi-driver, opa-envoy, dapr, vcluster, logstash-exporter, docker-compose, fscrypt, docker-machine-driver-harvester, aws-node-termination-handler, oras, spiffe-helper, smokescreen, git-lfs, witness,...

Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155480 Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kapp, nri-apache, containerd, buildkitd, flux, docker-machine-driver-harvester, cilium-cli, grafana-rollout-operator, witness, amazon-cloudwatch-agent-operator, kor, gcsfuse, caddy, tekton-chains, portieris, kubernetes-dashboard-api, kubernetes-dashboard-auth, k3d,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: render-template, eck-operator, kind, docker-cli-buildx, cluster-api-helm-controller, controller-gen, libnvidia-container, kubernetes-dashboard-api, tekton-chains, gatekeeper, step-kms-plugin, nri-memcached, rancher-agent, wal-g, gendesk, nri-consul, contour, monstach...

kor-rada.gov.ua XSS vulnerability

Open Bug Bounty ID: OBB-702360 Description| Value ---|--- Affected Website:| kor-rada.gov.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

foobar2000 1.3.8 - .m3u Local Crash (PoC)

foobar2000 1.3.8 - .m3u Local Crash PoC Exploit Title: foobar2000 1.3.8 .m3u Local Crash PoC Date: 12-06-2015 Exploit Author: 0neb1n Vendor Homepage: http://www.foobar2000.org/ Software Link: http://www.foobar2000.org/getfile/e246984718ab7ab58fa1e0b072ff05a4/foobar2000v1.3.8.exe Version: 1.3.8...

Adrenalin Player 2.2.5.3 (.m3u) - Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Adrenalin Player 2.2.5.3 Buffer Overflow ExploitSEH http://software.naver.com/software/summary.nhn?softwareId=MFS100099 Author: seaofglass [email protected] Version : 2.2.5.3 Tested on: WinXP3 KOR, Win7 KOR my $file = adrenalin.m3u; my $junk =...

VS 2010 - Lab Agent (x86 and x64) - All Languages

x86: Microsoft Visual Studio Lab Agent 2010 - CHS, CHT, DEU, ENU, ESN, FRA, ITA, JPN, KOR, RUS x64: Microsoft Visual Studio Lab Agent 2010 - CHS, CHT, DEU, ENU, ESN, FRA, ITA, JPN, KOR, RUS...