Lucene search
+L

45 matches found

Kitploit
Kitploit
added 2026/09/18 5:17 a.m.8 views

CVE-2025-70849

CVE-2025-70849: Stored XSS in Podinfo Summary A security vulnerability CWE-79 was identified in Podinfo , a web application for demonstrating Kubernetes microservices. The /store feature allows unauthenticated users to upload arbitrary HTML/JS content, leading to Stored XSS. Vulnerability Details...

6.1CVSS8.4AI score0.00254EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/17 7:25 p.m.7 views

CVE-2025-70849-Podinfo

CVE-2025-70849: Stored XSS in Podinfo Summary A security vulnerability CWE-79 was identified in Podinfo , a web application for demonstrating Kubernetes microservices. The /store feature allows unauthenticated users to upload arbitrary HTML/JS content, leading to Stored XSS. Vulnerability Details...

6.1CVSS8.4AI score0.00254EPSS
SaveExploits4
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.31 views

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: stakater-reloader, nova, flux-image-automation-controller, pgwatch, flux-notification-controller, victoriametrics, metacontroller, victoriametrics-cluster-fips, grafana-operator-fips, grafana-rollout-operator, nova-fips, grafana-operator, cluster-autoscaler-fips,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.55 views

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: speedtest-go, crossplane-provider-aws-rds, kuberay-operator, kubeflow-katib, cloud-sql-proxy, amazon-cloudwatch-agent-operator, crossplane-provider-aws-s3, nri-couchbase, pulumi-kubernetes-operator, traefik, delve, grafana-rollout-operator, rancher-webhook,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.26 views

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: vale, rabbitmq-messaging-topology-operator, rancher-telemetry, spegel, ytt, crossplane-provider-aws-rds, kuberay-operator, nginx-prometheus-exporter, wave, kubeflow-katib, amazon-cloudwatch-agent-operator, chart-testing, crossplane-provider-aws-s3, nri-couchbase,...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/06/25 10:34 p.m.13 views

GO-2026-5560 podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo

podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo...

6.1CVSS5.7AI score0.00195EPSS
SaveExploits2References8
RedhatCVE
RedhatCVE
added 2026/06/05 7:40 p.m.16 views

CVE-2026-43644

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

6.1CVSS5.3AI score0.00195EPSS
SaveExploits2References1
GithubExploit
GithubExploit
added 2026/05/16 2:19 a.m.131 views

Exploit for Unrestricted Upload of File with Dangerous Type in Stefanprodan Podinfo

CVE-2025-70849: Stored XSS in Podinfo Summary A security v...

6.1CVSS7.5AI score0.00254EPSS
SaveExploits4
Github Security Blog
Github Security Blog
added 2026/05/14 3:31 p.m.18 views

podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

6.1CVSS5.7AI score0.00195EPSS
SaveExploits2References8Affected Software1
OSV
OSV
added 2026/05/14 3:31 p.m.16 views

GHSA-Q23M-VM9R-5745 podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits2References8
NVD
NVD
added 2026/05/14 1:16 p.m.28 views

CVE-2026-43644

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

6.1CVSS0.00195EPSS
SaveExploits2References3
attackerkb
attackerkb
added 2026/05/14 12:37 p.m.14 views

CVE-2026-43644

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/05/14 12:37 p.m.20 views

EUVD-2026-30275

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2026/05/14 12:37 p.m.12 views

CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2026/05/14 12:37 p.m.63 views

CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.4CVSS0.00195EPSS
SaveExploits2References3
CVE
CVE
added 2026/05/14 12:37 p.m.38 views

CVE-2026-43644

CVE-2026-43644 affects podinfo up to version 6.11.2. The vulnerability is a reflected XSS in the /echo and /api/echo endpoints, caused by the echoHandler writing the request body to the response without setting explicit Content-Type or X-Content-Type-Options headers. Go’s content-type detection m...

6.1CVSS5.7AI score0.00195EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2026/05/14 12:37 p.m.15 views

CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

5.1CVSS5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.27 views

PT-2026-40911

Name of the Vulnerable Software and Affected Versions podinfo versions prior to 6.11.3 Description A reflected cross-site scripting issue exists in the '/echo' and '/api/echo' endpoints. The echoHandler function writes request body content directly to the response without setting explicit...

6.1CVSS5.7AI score0.00195EPSS
SaveExploits2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.20 views

podinfo 跨站脚本漏洞

Podinfo is a Kubernetes microservice template developed by Stefan Prodan. Versions of Podinfo 6.11.2 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from the fact that the echoHandler did not set a clear Content-Type or X-Content-Type-Options header on the...

6.1CVSS5.8AI score0.00195EPSS
SaveExploits2References1
GithubExploit
GithubExploit
added 2026/05/13 10:53 p.m.87 views

Security-Advisories

Security Advisories Public security advisories and proof-of-c...

5.4CVSS5.8AI score0.00195EPSS
SaveExploits2
Rows per page
Query Builder