CVE-2026-85634

The wildfly-core library, utilized by WildFly and JBoss EAP , contains a path traversal vulnerability within the ContentRepositoryImpl.copyExplodedContent function. The root cause is a missing containment check when processing unsanitized deployment names. An attacker possessing the Deployer RBAC...

CVE-2026-85634 Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...

Enumerate PostgreSQL Privilege Escalation Paths

Find likely PostgreSQL privilege escalation paths: superuser role chain, SECURITY DEFINER functions, unsafe searchpath, and risky extensions from kittysploit import from lib.protocols.postgresql.postgresqlclient import PostgreSQLClient class ModulePost, PostgreSQLClient: info = "name": "Enumerate...

GHSA-QXPC-96FQ-WWMG Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are...

AZL-82676 CVE-2026-27314 affecting package cassandra 5.0.0-2

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are...

EUVD-2015-7459

Malware in sbrugna...

CVE-2024-29834 Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL

A flaw was found in PostgreSQL. A late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL can allow an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling a safe refre...

Remote Code Execution (RCE)

redhat-support-plugin-rhev is vulnerable to remote code execution. It was found that redhat-support-plugin-rhev passed a user-specified path and file name directly to the command line in the log viewer component. This could allow users with the SuperUser role on any Entity to execute arbitrary...

CVE-2015-7544

redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager aka RHEV Manager before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment...

CVE-2015-7544: Improper Neutralization of Special Elements in Output Used by a Downstream Component

redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager aka RHEV Manager before 3.6 allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment...

PT-2017-7223 · Red Hat · Red Hat Enterprise Virtualization Manager

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization Manager versions prior to 3.6 Description: The issue allows remote authenticated users with the SuperUser role on any Entity to execute arbitrary commands on any host in the environment. Recommendations: For...

redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV

It was found that redhat-support-plugin-rhev passed a user-specified path and file name directly to the command line in the log viewer component. This could allow users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment...