CVE-2021-22214

CVE-2021-22214 Gitlab CI Lint API SSRF-Schwachstelle ohne Autorisierung CVE-2021-22214 Dieser Artikel und das Tool dienen ausschließlich der technischen Weitergabe. Die Nutzung für illegale Zwecke ist strengstens untersagt. Für sämtliche daraus entstehenden Konsequenzen übernimmt der Nutzer selbs...

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC per CVE-2021-22214: Gitlab SSRF Descrizione L'installazione remota di GitLab contiene una vulnerabilità di Server-side request forgery SSRF dovuta all'abilitazione della rete interna per i webhook. Un attaccante remoto non autenticato può sfruttare un'istanza GitLab con...

CVE-2021-22214

CVE-2021-22214 Descrizione - POC per CVE-2021-22214: Vulnerabilità SSRF non autenticata dell'API GitLab CI Lint - creato da antx il 2021-11-01. Dettaglio - Quando le richieste alla rete interna per i webhook sono abilitate, una vulnerabilità di server-side request forgery in GitLab CE/EE che...

sshconfig-lint

sshconfig-lint Verifique erros comuns no seu /.ssh/config. Verifica blocos de host duplicados, arquivos de identidade ausentes, problemas de ordenação de curingas, algoritmos fracos, diretivas duplicadas e muito mais. Suporta diretivas Include com detecção de ciclos...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204

Ghostwriter through version 7.2.6 is missing per-object authorization on its report template lint endpoints . The underlying cause is that RoleBasedAccessControlMixin.test_func only checks request.user.is_active unless a view explicitly overrides it, and neither the lint endpoint nor the stored-l...

EUVD-2026-64679

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, kube-logging-operator-custom-runner, flyte, kubernetes-csi-external-snapshotter, terragrunt, ctop, kubernetes-event-exporter, q, sftpgo-plugin-pubsub, azcopy, fuse-overlayfs-snapshotter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, whereabouts, kube-logging-operator-custom-runner, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, ctop, kubernetes-event-exporter, maru, sftpgo-plugin-pubsub,...

ansible-lint-26.8.0-1.1 on GA media (moderate)

ansible-lint-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11503-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

OPENSUSE-SU-2026:11503-1 ansible-lint-26.8.0-1.1 on GA media

These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in devplatform-cli-plugin-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8460a9cc2fce88e69d25156ea88612a5a67ffba26709ce88900d573e2f4b3ea On require of the package, index.js loads bootstrap.js which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32, downloads an...

Malicious code in folder-lint (npm)

npm/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

MAL-2026-11972 Malicious code in folder-lint (npm)

npm/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

MAL-2026-11868 Malicious code in @servicetitan/folder-lint (npm)

npm/@servicetitan/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

BIT-HELM-2026-63308 Helm Files.Lines Denial of Service via Empty Chart Files

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

SUSE CVE-2026-29051

melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and...

webp-https-errors (4.7.2) potentially affected by unknown CVE via prettier-lint-lenz (2.6.4)

prettier-lint-lenz NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on prettier-lint-lenz and may be impacted: - webp-https-errors 4.7.2 Source cves: unknown CVE Source advisory: SNYK:JS-PRETTIERLINTLENZ-18505266...