Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/09/04 3:36 a.m.4 views

CVE-2026-52832-PoC-exploit-nuclio-dashboard

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard NOP mode accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root...

4.9CVSS7.3AI score0.00494EPSS
SaveExploits2
Rows per page
Query Builder