611 matches found
Gryphon Tower - Cross-Site Scripting
Gryphon Tower router web interface contains a reflected cross-site scripting vulnerability in the url parameter of the /cgi-bin/luci/siteaccess/ page. An attacker can exploit this issue by tricking a user into following a specially crafted link, granting the attacker JavaScript execution in the...
CVE-2021-20253
CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...
CVE-2025-61155
CVE-2025-61155 — Arbitrary Process Termination in GameDriverX64.sys A signed kernel-mode anti-cheat driver — GameDriverX64.sys, shipped with Tower of Fantasy Hotta Studio / Perfect World — lets any unprivileged local user terminate arbitrary processes , including PPL-protected antivirus/EDR...
CVE
Control Tower Notification Enabler Este paquete cdk instala una función Lambda, con un rol IAM asociado, y suscribe la función Lambda a las notificaciones de seguridad agregadas de Control Tower. En caso de una violación de una regla de Control Tower por ejemplo, un bucket S3 de acceso público, l...
MAL-015
MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...
CVE-2026-41940
Based on Watch Tower POC , Supports direct shell access via websocket , and adding root api keys for persistance...
Astra Linux – Vulnerability in Ansible
A flaw was discovered in Ansible’s amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to exploit the issue, as the module handles the parameter insecurely, resulting in the password being leaked in the logs...
PYSEC-2026-768 Ansible leaks password to logs
A flaw was found in Ansible in the amazon.aws collection when using the towercallback parameter from the amazon.aws.ec2instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories
The internet is noisy this week. We are seeing some wild new tactics, like people using fake cell towers to send scam texts, while some developers are accidentally downloading tools that peek into their private files during a simple install. It is definitely a busy time to be online. Security is...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000551)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000551 advisory. The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted U...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002822)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002822 advisory. The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted U...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: open-webui, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes, py3-vllm-cuda-12.4, py3-cassandra-medusa, checkov, apache-beam-python-3.11-sdk, request-1276, awx, kubeflow-pipelines-visualization-server, airflow, kserve, authentik...
EUVD-2020-3128
Malware in sbrugna...
EUVD-2018-8669
Malware in sbrugna...
EUVD-2015-1616
Malware in sbrugna...
EUVD-2019-8962
Malware in sbrugna...
EUVD-2020-0006
Malware in sbrugna...