Aggregator

Submit #515867 / VDB-268200

Submit #515864 / VDB-300716

ingress-nginx admission controller RCE escalation

ingress-nginx controller configuration injection via unsanitized mirror annotations

ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation

ingress-nginx controller configuration injection via unsanitized auth-url annotation

ingress-nginx controller auth secret file path traversal vulnerability

2025第12周投资收益

2025第12周投资收益

2025第12周投资收益

2025第12周投资收益

2025第12周投资收益

2025第12周投资收益

2025第12周投资收益

Как уязвимость 2023 года привела к утечке в 2025-м.

A vulnerability was found in Apache Commons VFS up to 2.9.x. It has been declared as problematic. Affected by this vulnerability is the function FtpFileObject. The manipulation leads to information exposure through error message. This vulnerability is known as CVE-2025-30474. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache Commons VFS up to 2.9.x. It has been classified as problematic. Affected is the function resolveFile of the component FileObject API. The manipulation of the argument Scope leads to relative path traversal. This vulnerability is traded as CVE-2025-27553. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in nossrf up to 1.0.3 and classified as critical. This issue affects some unknown processing. The manipulation of the argument Hostname leads to server-side request forgery. The identification of this vulnerability is CVE-2025-2691. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.