ctfer-io kayıtları
ctfer-io üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-284 Improper Access Control2
- CWE-405 Asymmetric Resource Consumption (Amplification)1
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2025-53632Kavram kanıtı | Chall-Manager's scenario decoding process does not check for zip slipsctfer-io · chall-manager · CWE-22 | Yüksek8,8 | — | %0,8 | 10 Tem 2025 |
34İzleyin | CVE-2025-53633İstismar yok | Chall-Manager's scenario decoding process does not check for zip bombsctfer-io · chall-manager · CWE-405 | Yüksek8,7 | — | %0,5 | 10 Tem 2025 |
34İzleyin | CVE-2025-53634İstismar yok | Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacksctfer-io · chall-manager · CWE-770 | Yüksek8,7 | — | %0,5 | 10 Tem 2025 |
33İzleyin | CVE-2026-32805İstismar yok | Romeo is vulnerable to Archive Slip due to missing checks in sanitizationctfer-io · romeo · CWE-22 | Yüksek8,3 | — | %0,6 | 18 Mar 2026 |
31İzleyin | CVE-2026-32768İstismar yok | Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespacectfer-io · chall-manager · CWE-284 | Yüksek7,9 | — | %0,5 | 20 Mar 2026 |
31İzleyin | CVE-2026-32737İstismar yok | Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespacectfer-io · romeo · CWE-284 | Yüksek7,9 | — | %0,5 | 18 Mar 2026 |
- CVE-2025-5363235İzleyin
Chall-Manager's scenario decoding process does not check for zip slips
YüksekCVSS 8,8Kavram kanıtıEPSS %0ctfer-io · chall-manager10 Tem 2025
- CVE-2025-5363334İzleyin
Chall-Manager's scenario decoding process does not check for zip bombs
YüksekCVSS 8,7İstismar yokEPSS %0ctfer-io · chall-manager10 Tem 2025
- CVE-2025-5363434İzleyin
Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks
YüksekCVSS 8,7İstismar yokEPSS %0ctfer-io · chall-manager10 Tem 2025
- CVE-2026-3280533İzleyin
Romeo is vulnerable to Archive Slip due to missing checks in sanitization
YüksekCVSS 8,3İstismar yokEPSS %0ctfer-io · romeo18 Mar 2026
- CVE-2026-3276831İzleyin
Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
YüksekCVSS 7,9İstismar yokEPSS %0ctfer-io · chall-manager20 Mar 2026
- CVE-2026-3273731İzleyin
Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace
YüksekCVSS 7,9İstismar yokEPSS %0ctfer-io · romeo18 Mar 2026