Apache Struts2 S2-057 OGNL RCE (CVE-2018-11776)

Exploits CVE-2018-11776 S2-057 OGNL injection via crafted namespace paths when alwaysSelectFullNamespace is enabled. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts2 S2-057 OGNL RCE CVE-2018-11776 — execute session.""" from future import annotation...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the canonicalization process for namespace paths. An attacker can gain unauthorized management access to the containing namespace by supplying the special path segment "root" in requests to endpoints under...

SUSE CVE-2021-43784

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the C portion of the code responsible for the based namespace setup of container...