Lucene search
+L

26 matches found

Kitploit
Kitploit
added 2026/09/15 8:04 a.m.6 views

serverless

Sitio web • Documentación • X / Twitter • Slack de la comunidad • Foro El Serverless Framework – Facilita el uso de AWS Lambda y otros servicios cloud gestionados para crear aplicaciones que escalan automáticamente, no cuestan nada cuando están inactivas y requieren un mantenimiento drásticamente...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 5:36 a.m.14 views

TokenFlare

TokenFlare サーバーレスAITMフィッシングシミュレーションフレームワーク for Entra ID / M365 機能 軽量: コアロジック(src/worker.js 内、約530行のJavaScriptのみ) モジュール式: 多数のOAuthフローをサポートし、Intuneの条件付きアクセスバイパスを標準でサポート 簡単に調整可能: セミインタラクティブな tokenflare configure campaign サブコマンドを使用して、クライアントブランディング、URL構造(カスタムルアーパスとパラメータ)、認証完了後の最終リダイレクトなどを設定できます。...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 8:12 p.m.6 views

honeyLambda

サーバーレストラップ honeyλ - URL honeyトークンを作成・監視するためのシンプルなサーバーレスアプリケーションで、AWS Lambda と Amazon API Gateway を基盤としています。 Slack 通知 メールおよびSMSアラート 設定をローカルファイルまたは Amazon S3 から読み込み 各トークンのHTTPレスポンスをカスタマイズ 脅威インテリジェンスレポート 送信元IPルックアップ Cymon API v2 を使用 Serverless フレームワークベース 従量課金 プロバイダに依存しない 説明 honeyλ を使用すると、偽の HTTP...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:46 a.m.10 views

AlertResponder

AlertResponder 注:このリポジトリは廃止されました。新しいリポジトリはこちら: https://github.com/m-mizutani/deepalert AlertResponder は、セキュリティアラートの自動対応のためのサーバーレスフレームワークです。 概要 AlertResponder は、セキュリティの観点から注目すべきイベントであるアラートを受け取り、そのアラートに自動的に対応します。AlertResponder は自動対応の3つのパートを持っています。 1. Inspector...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 11:32 a.m.8 views

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---収束時間理論強化MCPエクスプロイト Serverless Framework MCP Server CVE-2025-69256 基本スコア: 9.4/10 → CTT強化スコア: 9.9/10 Serverless FrameworkのMCP(Model Context Protocol)サーバーにおける重大なコマンドインジェクション脆弱性を、CTTの時間共鳴により前例のない信頼性と回避能力で強化したエクスプロイトです。 🌀 CTT-MCP-RCE v1.0 - 収束時間理論強化 Serverless Framework...

7.5CVSS5.9AI score0.02418EPSS
SaveExploits2
NVD
NVD
added 2026/09/02 5:17 p.m.7 views

CVE-2026-52832

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...

4.9CVSS0.00494EPSS
SaveExploits2References4
OSV
OSV
added 2026/09/02 4:40 p.m.5 views

CVE-2026-52831 Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...

8CVSS5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/09/02 4:39 p.m.4 views

CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...

8.7CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/02 4:38 p.m.33 views

CVE-2026-79754 Nuclio: Kaniko build tempDir command injection

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

7.1CVSS0.0039EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 4:38 p.m.5 views

CVE-2026-52833 Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which...

8CVSS6AI score
SaveExploits0References6
EUVD
EUVD
added 2026/06/30 6:20 p.m.23 views

EUVD-2026-36101

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container...

4.9CVSS5.8AI score0.00256EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/10 6:17 p.m.31 views

CVE-2026-46614

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.23.0, the Fission router registers an internal-style route — /fission-function/ and /fission-function// — for every Function object,...

9.8CVSS0.00353EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/10 12:00 a.m.29 views

PT-2026-48504

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.24.0 Description Fission is an open-source, Kubernetes-native serverless framework used for deploying functions and applications on Kubernetes. A flaw exists where a low-privilege developer with permissions to creat...

7.7CVSS5.8AI score0.00231EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/06 6:57 a.m.9 views

CVE-2026-29042

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.15.20, the Nuclio Shell Runtime component contains a command injection vulnerability in how it processes user-supplied arguments. When a function is invoked via HTTP, the runtime reads the...

9.3CVSS5.7AI score0.02329EPSS
SaveExploits1References5Affected Software1
GithubExploit
GithubExploit
added 2026/01/28 4:32 a.m.407 views

Exploit for CVE-2025-69256

hi CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MC...

7.5CVSS6.2AI score0.02418EPSS
SaveExploits2
Veracode
Veracode
added 2026/01/02 8:51 a.m.17 views

Command Injection

Serverless Framework is vulnerable to Command Injection. The vulnerability is due to unsanitized user input being passed to childprocess.exec in the experimental MCP server feature, which allows an attacker to inject shell metacharacters and execute arbitrary system commands with the privileges o...

7.5CVSS7.5AI score0.02418EPSS
SaveExploits2References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/01 11:29 a.m.18 views

CVE-2025-69256

The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This...

7.5CVSS8.8AI score0.02418EPSS
SaveExploits2References1
Github Security Blog
Github Security Blog
added 2025/12/31 10:05 p.m.107 views

serverless MCP Server vulnerable to Command Injection in list-projects tool

Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This vulnerability only affects users of the experimental MCP server feature serverless mcp, which represents less than 0.1% of Serverless Framework users. The core Serverle...

7.5CVSS9.4AI score0.02418EPSS
SaveExploits2References6Affected Software1
EUVD
EUVD
added 2025/12/31 10:05 p.m.17 views

EUVD-2025-205851

serverless MCP Server vulnerable to Command Injection in list-projects tool...

7.5CVSS6.7AI score0.02418EPSS
SaveExploits2References5
OSV
OSV
added 2025/12/31 10:05 p.m.12 views

GHSA-RWC2-F344-Q6W6 serverless MCP Server vulnerable to Command Injection in list-projects tool

Summary A command injection vulnerability exists in the Serverless Framework's built-in MCP server package @serverless/mcp. This vulnerability only affects users of the experimental MCP server feature serverless mcp, which represents less than 0.1% of Serverless Framework users. The core Serverle...

7.5CVSS9.3AI score0.02418EPSS
SaveExploits2References6
Rows per page
Query Builder