bandit

.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png :alt: Bandit ====== .. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main :target:...

CVE-2017-18635

cve-2017-18635 PoC для CVE-2017-18635 Полная статья: Эксплуатация старого noVNC XSS CVE-2017-18635 в OpenStack...

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

brawl-public-game-001

BRAWL Одной из сложных проблем для исследователей в области кибербезопасности, разрабатывающих возможности обнаружения и реагирования, является поиск реалистичной среды для проверки своих гипотез и возможностей. Самый дешевый метод — тестирование возможностей в небольшой лабораторной сети. Но в...

CVE-2013-0212

CVE-2013-0212 Версия: https://github.com/openstack/glance/tree/4b768a4a847a0f5c857f4fe3f3bca720da9b3949...

CVE-2026-71197

A flaw was found in OpenStack Glance. The web-download image import method can bypass host-based blocklist filtering. When an operator configures disallowedhosts with IP addresses to block access to internal services, an attacker can circumvent this protection by using a hostname that resolves to...

CVE-2026-71198

A server-side request forgery SSRF vulnerability was found in OpenStack Glance. When the HTTP store backend is enabled, an authenticated user can add an image location URL pointing to internal network services. Glance validates only the URL scheme and does not check the host or IP address, allowi...

CVE-2026-71196

A server-side request forgery SSRF vulnerability was found in OpenStack Glance. The web-download image import method allows authenticated users to provide a URI from which the Glance service fetches data. Due to insufficient default host filtering, an attacker with standard tenant credentials can...

syntribos

============= Étiquettes d'équipe et de dépôt .. image:: http://governance.openstack.org/badges/syntribos.svg :target: http://governance.openstack.org/reference/tags/index.html .. image:: http://img.shields.io/badge/docs-latest-brightgreen.svg?style=flat :target:...

CVE-2013-2006

CVE-2013-2006 Версия: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

[SECURITY] [DLA 4767-1] keystone security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4767-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 02, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6480-1] keystone security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6480-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 01, 2026 https://www.debian.org/security/faq -...

CVE-2026-54770 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, openstack-nova-2025.2, openstack-glance-2025.1-fips, openstack-glance-2026.1, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, openstack-keystone-2025.2,...

GHSA-6HX8-3WJJ-GR8G vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, openstack-nova-2025.2, openstack-glance-2025.1-fips, openstack-glance-2026.1, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, openstack-keystone-2025.2,...

EUVD-2026-66818

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

DEBIAN-CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

Linux Distros Unpatched Vulnerability : CVE-2026-80183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...