61530 matches found
CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator
In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...
CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator
In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...
Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator
In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...
osiris
⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CVE-2025-29557
CVE-2025-29557 – Divulgación de Credenciales de la API de Configuración de Correo de ExaGrid 📝 Resumen Título de la Vulnerabilidad : Divulgación de Credenciales SMTP a través de la API de Configuración de Correo Producto : Dispositivo de Respaldo ExaGrid EX10 Versiones Afectadas : 6.3 – 7.0.1.P08...
fusionpbx_rce_vulnerability
Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...
CVE-2024-53900
es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...
CVE-2025-59470-PostgreSQL-Command-Injection
Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...
CVE-2026-68494 vulnerabilities
Vulnerabilities for packages: keycloak, apache-tika, apache-nifi, wildfly, opensearch, scala, sonarqube, druid, keycloak-config-cli, tez, logstash, trino, strimzi-kafka-operator, spark, akhq, cass-config-builder, gradle, spdx-tools-java, infinispan, apache-nifi-registry, flyway, dependency-track,...
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: keycloak, apache-tika, apache-nifi, wildfly, opensearch, scala, sonarqube, druid, keycloak-config-cli, tez, logstash, trino, strimzi-kafka-operator, spark, akhq, cass-config-builder, gradle, spdx-tools-java, infinispan, apache-nifi-registry, flyway, dependency-track,...
PT-2026-104557
Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules CSM Operator versions prior to 1.18.0 Description An improper privilege management issue exists in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could exploit this flaw t...
CVE-2026-104055
The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...
GHSA-7HHH-6RMP-J9QF vulnerabilities
Vulnerabilities for packages: akhq, apache-pulsar-fips, celeborn, wso2is, logstash, apache-pulsar, cruise-control, drain-cleaner, nuxeo, spark-fips, flink-kubernetes-operator, keycloak-config-cli, spark, logstash-fips, thingsboard, kafbat-ui, cassandra-reaper, hadoop-client-modules,...
CVE-2026-89425 vulnerabilities
Vulnerabilities for packages: akhq, apache-pulsar-fips, celeborn, wso2is, logstash, apache-pulsar, cruise-control, drain-cleaner, nuxeo, spark-fips, flink-kubernetes-operator, keycloak-config-cli, spark, logstash-fips, thingsboard, kafbat-ui, cassandra-reaper, hadoop-client-modules,...
GHSA-P6PP-M3F8-5C89 vulnerabilities
Vulnerabilities for packages: akhq, apache-pulsar-fips, celeborn, wso2is, logstash, apache-pulsar, cruise-control, drain-cleaner, nuxeo, spark-fips, flink-kubernetes-operator, keycloak-config-cli, spark, logstash-fips, thingsboard, kafbat-ui, cassandra-reaper, hadoop-client-modules,...
CVE-2026-89407 vulnerabilities
Vulnerabilities for packages: akhq, apache-pulsar-fips, celeborn, wso2is, logstash, apache-pulsar, cruise-control, drain-cleaner, nuxeo, spark-fips, flink-kubernetes-operator, keycloak-config-cli, spark, logstash-fips, thingsboard, kafbat-ui, cassandra-reaper, hadoop-client-modules,...
GHSA-7HHH-6RMP-J9QF vulnerabilities
Vulnerabilities for packages: wildfly, wavefront-proxy, opensearch, jenkins-plugin-manager, strimzi-kafka-oauth, sonarqube, druid, keycloak-config-cli, tez, logstash, management-api-for-apache-cassandra-5.0, neo4j, celeborn, strimzi-kafka-operator, spark, akhq, thingsboard, cass-config-builder,...
GHSA-P6PP-M3F8-5C89 vulnerabilities
Vulnerabilities for packages: wildfly, wavefront-proxy, opensearch, jenkins-plugin-manager, strimzi-kafka-oauth, sonarqube, druid, keycloak-config-cli, tez, logstash, management-api-for-apache-cassandra-5.0, neo4j, celeborn, strimzi-kafka-operator, spark, akhq, thingsboard, cass-config-builder,...
CVE-2026-89407 vulnerabilities
Vulnerabilities for packages: wildfly, wavefront-proxy, opensearch, jenkins-plugin-manager, strimzi-kafka-oauth, sonarqube, druid, keycloak-config-cli, tez, logstash, management-api-for-apache-cassandra-5.0, neo4j, celeborn, strimzi-kafka-operator, spark, akhq, thingsboard, cass-config-builder,...