Lucene search
+L

298 matches found

Kitploit
Kitploit
added 2026/09/13 5:12 a.m.6 views

crAPI

crAPI c ompletely r idiculous API crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 5:49 p.m.4 views

whale-sentinel-services

🐋 Whale Sentinel Services 🔧 Overview Whale Sentinel Services is the centralized backend of the Whale Sentinel threat detection ecosystem. These microservices perform real-time threat detection, agent coordination, DGA analysis, and web attack inspection, enabling deep security observability and...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 8:56 a.m.12 views

apache_skywalking

Protocols There are two types of protocols list here. Probe Protocol. Include the descriptions and definitions about how agent send collected metrics data and traces, also the formats of each entities. Query Protocol. The backend provide query capability to SkyWalking own UI and others. These...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:12 a.m.11 views

litmus

LitmusChaos 오픈 소스 카오스 엔지니어링 플랫폼 다른 언어는여기를 참조하세요. 🇰🇷 🇨🇳 🇧🇷 🇮🇳 개요 LitmusChaos는 통제된 방식으로 카오스 테스트를 실행하여 팀이 인프라의 약점과 잠재적인 운영 중단을 파악할 수 있게 해주는 오픈 소스 카오스 엔지니어링 플랫폼입니다. 개발자와 SRE는 LitmusChaos를 통해 카오스 엔지니어링을 도입할 수 있으며, 이는 사용하기 쉽고 현대 카오스 엔지니어링 원칙에 기반하며 커뮤니티의 협력으로 운영됩니다. LitmusChaos는 100% 오픈 소스이며 CNCF 프로젝트입니다...

6.2AI score
SaveExploits0References13
NVD
NVD
added 2026/08/04 8:16 p.m.10 views

CVE-2026-16792

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...

7CVSS0.00074EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/04 7:48 p.m.31 views

EUVD-2026-52885

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...

7CVSS5.5AI score0.00074EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.13 views

Oracle GoldenGate 19.x < 19.32.0.0.260721 (July 2026 CPU)

The 19.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate component: Service Manager. Easily exploitable vulnerability allows low privileged...

8.8CVSS6.5AI score0.00972EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.14 views

Oracle GoldenGate 21.x < 21.23.0.0.0 (July 2026 CPU)

The 21.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate component: Service Manager. Easily exploitable vulnerability allows low privileged...

8.8CVSS6.8AI score0.02735EPSS
SaveExploits1References19
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.15 views

Oracle GoldenGate 23.x < 23.26.3.0.0 (July 2026 CPU)

The 23.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate component: Service Manager. Easily exploitable vulnerability allows low privileged...

8.8CVSS6.8AI score0.02735EPSS
SaveExploits1References21
EUVD
EUVD
added 2026/07/22 12:31 a.m.14 views

EUVD-2026-46800

Vulnerability in Oracle GoldenGate component: Oracle GoldenGate Microservices. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

8.8CVSS7.2AI score0.00432EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 10:17 p.m.8 views

CVE-2026-60398

Vulnerability in Oracle GoldenGate component: Oracle GoldenGate Microservices. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

8.8CVSS0.00432EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/01 2:25 p.m.16 views

CVE-2026-58399

@acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unauthenticated authentication bypass in validateToken through spoofable auth-user and Host request headers. The validateToken middleware contains a service-to-service bypass for...

8.7CVSS5.8AI score0.00973EPSS
SaveExploits0References4Affected Software1
GithubExploit
GithubExploit
added 2026/06/09 11:32 a.m.101 views

ecommerce-poc

Event-Driven E-Commerce Saga POC This project is a small even...

5.6AI score
SaveExploits0
Fedora
Fedora
added 2026/05/23 12:58 a.m.29 views

[SECURITY] Fedora 44 Update: dotnet10.0-10.0.108-1.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7.5CVSS5.7AI score0.0243EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/05/14 12:00 a.m.32 views

Detecting Privilege Escalation in Polyglot Microservices Via Agentic Program Analysis

Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to...

5.8AI score
SaveExploits0
Veracode
Veracode
added 2026/05/07 5:27 p.m.30 views

Uncontrolled Recursion

@nestjs/microservices is vulnerable to Uncontrolled Recursion. The vulnerability is due to recursive processing of multiple JSON messages in a single TCP frame without proper recursion limits, which allows an attacker to trigger a stack overflow and crash the application...

7.5CVSS5.9AI score0.00329EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/25 12:00 a.m.19 views

kratos 安全漏洞

Kratos is a microservices governance framework developed by Yanhu individuals, built using the Go language. Kratos versions 2.9.2 and earlier contain security vulnerabilities. These vulnerabilities stem from a function in the component http.DefaultServeMux Fallback Handler, namely the function...

6.9CVSS6AI score0.00315EPSS
SaveExploits0References1
Wallarm Lab
Wallarm Lab
added 2026/04/21 1:00 p.m.14 views

Why API Discovery Is the First Step to Securing AI

TL;DR AI risk doesn’t live in the model. It lives in the APIs behind it. Every AI interaction triggers a chain of API calls across your environment. Many of those APIs aren’t documented or tracked. That’s your real exposure. Shadow API discovery gives you visibility into those hidden endpoints, s...

6AI score
SaveExploits0
Snyk
Snyk
added 2026/04/14 12:15 a.m.51 views

Uncontrolled Recursion

Overview @nestjs/microservices is a Nest - modern, fast, powerful node.js web framework @microservices Affected versions of this package are vulnerable to Uncontrolled Recursion through the handleData function in packages/microservices/helpers/json-socket.ts. An attacker can crash the TCP...

8.7CVSS5.7AI score0.00329EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2026/04/14 12:15 a.m.2 views

@artur-abliazimov/othentic-cli (1.16.6), @darraghor/nest-backend-libs (>=3.8.8, <=5.0.11) +21 more potentially affected by CVE-2026-40879 via @nestjs/microservices (>=11.0.1, <=11.1.18)

@nestjs/microservices NPM version =11.0.1, =3.8.8, =11.0.36, =1.0.0, =1.0.11, =1.0.23, =1.0.1, =1.0.1, =11.0.0, =0.7.0, =1.0.4, =1.0.36, =1.1.0, =1.0.0, =1.9.1, =1.16.9 and more Source cves: CVE-2026-40879 Source advisory: OSV:GHSA-HPWF-8G29-85QM...

7.5CVSS5.3AI score0.00329EPSS
SaveExploits0
Rows per page
Query Builder