Vulnerabilidades

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd…

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in…

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a crafted…

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM)…

containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file…

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that allows authenticated attackers to execute arbitrary shell scripts by writing to the writable persistent JFFS2 storage path and triggering execution through the authenticated HTTP endpoint. Attackers…

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate…

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by supplying a malicious Wireless parameter to the HTTP PUT NetSDK/Factory SetMAC endpoint. Attackers can craft a string beginning with…

NVIDIA AIStore framework contains a vulnerability where an attacker could bypass authentication. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and data tampering.

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that…

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is not set (packages/server/src/enterprise/middleware/passport/index.ts). Because this default secret is publicly visible…

Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation endpoint (packages/server/src/controllers/text-to-speech/index.ts), independent of the server's configured CORS policy. This bypasses the server's otherwise restrictive default CORS configuration…

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser context with --disable-web-security enabled. An attacker can execute arbitrary JavaScript and, combined…

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured (authentication is opt-in,…

picklescan anterior a la versión 0.0.29 no detecta la función integrada de Python profile.Profile.run cuando se utiliza en métodos reduce de pickle, lo que permite a los atacantes ejecutar código arbitrario. Atacantes remotos pueden crear archivos pickle maliciosos que eluden la detección de picklescan y logran la…

picklescan anterior a 0.0.29 falla en detectar archivos pickle maliciosos que utilizan code.InteractiveInterpreter.runcode en métodos reduce. Los atacantes pueden crear cargas útiles pickle que eluden la detección de picklescan y ejecutan código arbitrario cuando se cargan a través de pickle.load().

picklescan anterior a la versión 0.0.30 no detecta la función doctest.debug_script al analizar archivos pickle, permitiendo a los atacantes ejecutar código arbitrario. Atacantes remotos pueden crear archivos pickle maliciosos que incrustan llamadas a doctest.debug_script que eluden la detección de picklescan y…

picklescan anterior a la 0.0.30 no detecta las llamadas a la función cProfile.run en los métodos 'reduce' de pickle, permitiendo a los atacantes ejecutar código arbitrario. Atacantes remotos pueden elaborar archivos pickle maliciosos con cargas útiles de cProfile.run que eluden la detección de picklescan y logran la…

Picklescan anterior a la versión 0.0.25 no logra detectar funciones globales inseguras en la biblioteca Numpy, lo que permite a los atacantes eludir el análisis estático y ejecutar código arbitrario durante la deserialización. Los atacantes pueden crear archivos pickle maliciosos utilizando…

picklescan anterior a 0.0.29 no logra detectar la función integrada de Python trace.Trace.runctx cuando se utiliza en métodos reduce de archivos pickle, lo que permite a los atacantes ejecutar código arbitrario. Atacantes remotos pueden crear archivos pickle maliciosos con cargas útiles de trace.Trace.runctx que…

picklescan anterior a 0.0.28 no logra detectar archivos pickle maliciosos utilizando la función torch.utils.collect_env.run en métodos reduce. Los atacantes pueden incrustar código no detectado en archivos pickle que ejecuta comandos remotos cuando son cargados por las víctimas.

picklescan anterior a la versión 0.0.29 no detecta la función integrada trace.Trace.run al analizar archivos pickle, lo que permite a los atacantes incrustar código malicioso no detectado. Atacantes remotos pueden crear archivos pickle maliciosos utilizando trace.Trace.run en el método reduce para lograr ejecución de…

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows authenticated users to execute arbitrary commands as root. The vulnerability exists because user-controlled loginserver and loginserver_authkey parameters are improperly quoted within a…