85 matches found
Talos Linux: Support bundle does not redact registry credentials
Summary When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle. Details Within the generated support bundle, inside resources/registryconfigs.cri.talos.dev.yaml the auth field of the spec is retained. The same, potentially...
GHSA-7CXH-94CF-MFP6 Talos Linux: Support bundle does not redact registry credentials
Summary When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle. Details Within the generated support bundle, inside resources/registryconfigs.cri.talos.dev.yaml the auth field of the spec is retained. The same, potentially...
CVE-2026-77564
In Talos Linux versions prior to 1.12.9 and 1.13.3 , the talosctl utility fails to redact sensitive information when generating support bundles. Specifically, the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml are included...
CVE-2026-85490
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
EUVD-2026-94794
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
PT-2026-107859
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
PT-2026-107784
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support...
CVE-2026-85490: Improper Limitation of a Pathname to a Restricted Directory
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
CVE-2026-87672: Insertion of Sensitive Information into Log File
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support...
Cleartext Storage of SupportLink HTTP Proxy Credentials in Diagnostic Support Bundles
: An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support...
Arbitrary File Write via Path Traversal during Support Bundle Extraction in Brocade ASCG before 3.5.0 (CVE-2026-85490)
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
GO-2026-5736 vulnerabilities
Vulnerabilities for packages: kcp, juicefs, dapr-fips, dapr, multicluster-controlplane-fips, rancher-support-bundle-kit, etcd, multicluster-controlplane, kcp-fips, milvus...
EUVD-2013-6497
Malware in sbrugna...
EUVD-2022-0841
Malicious code in bioql PyPI...
EUVD-2025-14022
Malicious code in bioql PyPI...
EUVD-2023-1928
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-1770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: OTRS Community Edition: 5.0.41 an...
CVE-2022-45383
An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fabd860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission...