kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

Cairn

Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...

prism

Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense To appear in the 53rd International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Equal contribution...

CVE-2026-97054 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, clickhouse-backup-fips, grafana-postgresql-datasource, longhorn-manager-fips, regclient-fips, container-object-storage-interface-fips, azurefile-csi-fips, cert-manager-cmctl, step-ca, tekton-pipelines,...

GHSA-RG98-F588-44XG vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, clickhouse-backup-fips, grafana-postgresql-datasource, longhorn-manager-fips, regclient-fips, container-object-storage-interface-fips, azurefile-csi-fips, cert-manager-cmctl, step-ca, tekton-pipelines,...

CVE-2024-38473

Proof of Concept PoC for Encoding Problem in modproxy in Apache HTTP Server This repository contains Proof of Concept PoC scripts for demonstrating an encoding problem in the modproxy module of Apache HTTP Server versions 2.4.59 and earlier. This vulnerability allows request URLs with incorrect...

CVE-2026-124470 OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists

OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portalcustomreport.php that allows authenticated portal patients to read other patients' problem list entries. Attackers can enumerate sequential IDs in issue parameter names to retrieve other patient...

CVE-2026-124470 OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists

OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portalcustomreport.php that allows authenticated portal patients to read other patients' problem list entries. Attackers can enumerate sequential IDs in issue parameter names to retrieve other patient...

CVE-2026-124470

OpenEMR versions prior to 8.3.0 are vulnerable to a broken object level authorization (BOLA) vulnerability in portal/report/portal_custom_report.php. This flaw allows authenticated portal patients to access private problem list entries belonging to other patients by enumerating sequential IDs wit...

CVE-2020-9709

Adobe Photoshop versions Photoshop CC 2019 and Photoshop 2020 are affected by a security bypass vulnerability (CVE-2020-9709). Successful exploitation of this flaw could lead to privilege escalation . The vulnerability is addressed in versions 20.0.10 and 21.2.1 (as referenced in Adobe security a...

CVE-2019-16447

Adobe Illustrator CC versions 23.1 and earlier are vulnerable to a binary planting vulnerability. Successful exploitation of this flaw could lead to local code execution . The issue is associated with the APSB19-36 advisory. The provided documents do not specify a direct root cause, detailed expl...

Fedora 45 : openbao (2026-c0f7a19ee3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c0f7a19ee3 advisory. Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4 ---- Update to 2.6.3-2. Fixes...

CLEANSTART-2026-KX96717 Security fix for GHSA-8rm2-7qqf-34qm applied in: amazon-cloudwatch-agent 1.300065.0-r1, metrics-server-fips 0.8.1-r2, node-problem-detector 1.35.2-r1, keda-fips 2.19.0-r1, trillian 1.7.3-r1, elastic-beats 8.19.14-r0

GHSA-8rm2-7qqf-34qm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MO57700 Security fix for GHSA-fw8g-cg8f-9j28 applied in: amazon-cloudwatch-agent 1.300065.0-r1, metrics-server-fips 0.8.1-r2, trillian-fips 1.7.3-r1, node-problem-detector 1.35.2-r1, keda-fips 2.19.0-r1, trillian 1.7.3-r1, elastic-beats 8.19.14-r0

GHSA-fw8g-cg8f-9j28 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW70000 Security fix for GHSA-mh2q-q3fh-2475 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, prometheus-operator 0.89.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, node-problem-detector 1.35.2-r1, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-operator 0.88.1-r0, kubernetes-csi-livenessprobe-fips 2.17.0-r2, modelmesh-runtime-adapter 0.12.0-r2

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AG54423 Security fix for GHSA-p77j-4mvh-x3m3 applied in: helm-fips 3.20.2-r0, dynamic-localpv-provisioner 4.5.0-r1, argo-workflows 3.6.19-r3, fulcio-fips 1.8.7-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r2, litestream 0.5.14-r1, falco-exporter 0.8.7-r2, k8sgpt-operator 0.2.27-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2, cert-manager 1.19.4-r1

GHSA-p77j-4mvh-x3m3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

BIT-RABBITMQ-2026-67418 RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

DEBIAN-CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...

CVE-2026-67418

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmqmqtt/src/rabbitmqttpacket.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated...