EUVD-2015-5307

Malware in sbrugna...

EUVD-2022-45051

Malicious code in bioql PyPI...

CVE-2022-41939

knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious "lifecycle" container. This issues has...

Cloud Foundry Diego Privilege Gain Vulnerability

Cloud Foundry Diego is a container management system used in the Cloud Foundry cloud computing platform from the Cloud Foundry Foundation in the United States. A security vulnerability exists in Cloud Foundry Diego versions prior to 2.8.0, which stems from the program's failure to properly filter...

CVE-2018-1265

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego...

PT-2018-11306

Name of the Vulnerable Software and Affected Versions Cloud Foundry Diego versions prior to 2.8.0 Description The issue is related to the improper sanitization of file paths in tar and zip files headers. A remote attacker with CF admin privileges can exploit this by uploading a malicious buildpac...