9 matches found
base-drupal
BASE-DRUPAL 这是 Cved 的一部分： 一个用于管理易受攻击的 docker 容器的工具。 Cved：https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/base-drupal 镜像基于：https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...
cve-2019-5420
CVE-2019-5420 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-5420 Image author: https://github.com/knqyf263/CVE-2019-5420...
CVE-2020-11800
作业指南要求的章节均以“（必需）”标记。 1. 环境（必需） Dockerfile（必需） 本环境使用基于 Vulhub 提供的存在漏洞的 Zabbix Server 镜像的自定义 Dockerfile。 root@kitploit: FROM vulhub/zabbix:3.0.3-server 该 Dockerfile 使用存在漏洞的 Zabbix 3.0.3 服务器环境构建本地镜像。构建过程中未添加额外的软件包或配置。 docker-compose.yml（必需） 漏洞环境使用 Docker Compose 进行配置。 该环境由四个服务组成： Zabbix Server Zabbi...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-vuln-demo Intentionally vulnerable demo image for Sys...
EUVD-2021-2264
Malware in sbrugna...
CVE-2023-47630 Attacker can cause Kyverno user to unintentionally consume insecure image
Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then...
MMS Exploit Part 3: Constructing the Memory Corruption Primitives
Posted by Mateusz Jurczyk, Project Zero This post is the third of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published a...
Security Bulletin: SmartCloud Provisioning is affected by a vulnerability in OpenSSL (CVE-2014-0160)
Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this vulnerability...