Skip to content
Threat Feed
Subscribe

Tag

Configuration-Vulnerability

2 briefs RSS
high advisory

Hard-coded Replication Secret in Central Dogma Enables Cluster Takeover

Central Dogma uses a hard-coded ZooKeeper replication secret that allows unauthenticated network actors to access configuration logs, perform session forgery, and gain cluster-wide command execution.

Central Dogma configuration-vulnerability hardcoded-credential central-dogma zookeeper
3t
high advisory

Argument Injection Vulnerability in CodeWhale git_show Tool

An argument injection vulnerability (CVE-2026-75913) in the CodeWhale git_show tool allows attackers to perform arbitrary file writes under the user's privilege level by manipulating the 'rev' parameter.

PoC codewhale +6 remote-code-execution configuration-vulnerability developer-tools vulnerability code-execution authorization-bypass path-traversal data-exfiltration +5
1r 5t 3c updated