13303 matches found
containerd: Unpack DoS via repeated opaque whiteouts
Impact A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity. During the unpack operation, specific file configurations within the layer can trigger repeated directory traversals. Consequently, pulling or...
EUVD-2026-97822
containerd: Unpack DoS via repeated opaque whiteouts...
GHSA-RP3H-JF77-Q9P4 containerd: Unpack DoS via repeated opaque whiteouts
Impact A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity. During the unpack operation, specific file configurations within the layer can trigger repeated directory traversals. Consequently, pulling or...
CVE-2026-76904
GeoServer WFS Inventory and Authorized Verification This repository contains two Python scripts for investigating GeoServer WFS endpoints. Overview wfsinventory.py Purpose: Inventory layers, XSD fields, and WFS values, and optionally verify candidates via a time-based check. Execution examples:...
CVE-2026-47218
runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...
CVE-2026-47218 runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox
runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker...
CVE-2026-47218
The runwasi project contains a vulnerability in containerd-shim-wasmtime-v1 prior to version 0.6.1 . The flaw allows an attacker to provide Wasmtime precompiled bytes directly within an OCI image layer, which the shim incorrectly treats as a trusted artifact from the precompile-cache path. By des...
CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN
CVE-2026-22008 ā AWS Lambda Layer Injection via Shared Layer ARN Program Code Python deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing malicious code Victim function...
webcgi-exploits
Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...
WordPress-Long-Password-Denial-of-Service
WordPress Denial of Service CVE-2014-9016 Disclaimer The contents of this script are intended to only be used only in an ethical manner. Do not use this script if you do not have written permission from the owner of the equipment. If you perform illegal actions, you are likely to be arrested and...
goIssue_dunfell
OpenEmbedded-Core OpenEmbedded-Core is a layer containing the core metadata for current versions of OpenEmbedded. It is distro-less can build a functional image with DISTRO = "nodistro" and contains only emulated machine support. For information about OpenEmbedded, see the OpenEmbedded website:...
mongobleed-exploit-CVE-2025-14847
š©ø MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure š Full Documentation ā¢ š¬ Technical Analysis ā¢ ā” Quick Commands šÆ CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...
CVE-2023-46604-RCE
CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...
CVE-2026-102047
An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...
CVE-2026-102050
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated...
CVE-2026-102051
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast...
EUVD-2026-101375
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast...
CVE-2026-102051
The l2cpd process in Juniper Networks Junos OS and Junos OS Evolved platforms is vulnerable to an Improper Release of Memory Before Removing Last Reference (CWE-401). An adjacent unauthenticated attacker can trigger l2cpd memory exhaustion and Layer 2 control-plane disruption by sending LLDP traf...
CVE-2026-102051 Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast...
EUVD-2026-101374
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated...