reflector

reflector 描述 Burp Suite 扩展能够实时在浏览网站时发现页面上的反射型 XSS，并包含以下特性： 在响应标签页中高亮显示反射内容。 测试该反射中允许哪些符号。 分析反射上下文。 Content-Type 白名单。 如何使用 安装插件后，您只需开始操作被测 Web 应用程序。每当发现反射时，reflector 会定义严重性并生成 Burp issue。 每个 Burp issue 包含有关反射参数的详细信息，例如： 该反射中允许的符号。 在响应中高亮显示反射值。 反射上下文分析。 允许的符号分析 当发现反射并且启用了"Aggressive...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver-fips, temporal-fips, localstack, cert-manager-fips, podinfo, flux-source-watcher, cluster-autoscaler-fips, loki-fips, metacontroller, aws-ebs-csi-driver, grafana-operator, victorialogs, pluto, go, omnictl-multiarch, pgwatch, victoriametrics-fips,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: buildkitd, pulumi, sops, nuclei, prometheus-operator, druid, k8sgpt, thanos, falcoctl, timestamp-authority, bank-vaults, kubescape, cosign, wal-g, hugo, flux-source-controller, spire-server, harbor-registry, fluent-bit-plugin-loki, chezmoi,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: kor, kube-state-metrics, newrelic-fluent-bit-output, scorecard, newrelic-infrastructure-agent, volume-modifier-for-k8s, kaf, nri-memcached, nuclei, supercronic, thanos, aws-flb-firehose, delve, trillian, bazelisk, kubewatch, caddy, grafana-operator, grpcurl,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: gitea, trillian, terraform-provider-azapi, kyverno-policy-reporter-ui, steampipe, minify, victoriametrics-operator, kuberlr, cloudflared, rabbitmq-cluster-operator, wgcf, newrelic-nri-kube-events, container-object-storage-interface,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rancher, opa-envoy, db-operator, kube-state-metrics, addon-resizer, hcloud, coredns, vcluster, volume-modifier-for-k8s, amazon-cloudwatch-agent-operator, chisel, delve, bank-vaults, kbld, sftpgo-plugin-geoipfilter, envconsul, grafana-operator, cluster-autoscaler,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, buildkitd, crossplane-provider-azure, gh, pulumi, scorecard, sops, nuclei, flux-image-automation-controller, falcoctl, timestamp-authority, bank-vaults, kubescape, cosign, gitsign, rabbitmq-messaging-topology-operator, pulumi-kubernetes-operator,...

CVE-2026-73147

GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client...

CVE-2026-73147

A flaw was found in svxlink's reflector client. The talkerstart and talkerstop event handlers directly concatenate a server-supplied talker callsign into TclEval commands without any sanitization or escaping. A malicious or compromised reflector server can supply a crafted callsign containing TCL...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: promitor, kubernetes-reflector...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: promitor, kubernetes-reflector...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: azure-functions-host, promitor, kubernetes-reflector...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: azure-functions-host, promitor, kubernetes-reflector...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: azure-functions-host, kubernetes-reflector...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, gh, mariadb-operator, local-path-provisioner, volume-modifier-for-k8s, dkron, flux-image-automation-controller, karpenter, nfs-subdir-external-provisioner, supercronic, smarter-device-manager, victoriametrics-cluster, dbmate,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opa-envoy, db-operator, scorecard, trillian, terraform-provider-azapi, kyverno-policy-reporter-ui, caddy, custom-pod-autoscaler-operator, grpc-health-probe, kargo, nri-haproxy, victoriametrics-operator, doppler-kubernetes-operator, kuberlr, wgcf,...