CVE-2025-71210

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned version of the Nx Console Microsoft Visual Studio Code VS Code extension. The development comes as the Nx team revealed that the extensio...

Trend Micro Apex One 路径遍历漏洞

Trend Micro Apex One is a terminal protection software developed by Trend Micro, a US-based company. Trend Micro Apex One has a path traversal vulnerability, which originates from the management console. This vulnerability could allow remote attackers to upload malicious code and execute commands...

Trend Micro Apex One 路径遍历漏洞

Trend Micro Apex One is a terminal protection software developed by Trend Micro, a US-based company. Trend Micro Apex One has a path traversal vulnerability, which originates from the management console. This vulnerability could allow remote attackers to upload malicious code and execute commands...

Trend Micro Apex One: CVE-2025-71211: Console Directory Traversal Remote Code Execution Vulnerability

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerabili...

Trend Micro Apex One: CVE-2025-71210: Console Directory Traversal Remote Code Execution Vulnerability

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...

Exploit for CVE-2026-2587

CVE-2026-2587 — GlassFish EL Injection RCE...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitsign, terragrunt-fips, trivy, crossplane-fips, packer, argo-events, external-secrets-operator, mapotf, grafana, trivy-fips, gitlab-rails-ce-fips, cerbos-fips, flux-image-automation-controller-fips, pulumi-language-java, kubescape, grype-fips, coder-fips, melange,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitsign, terragrunt-fips, trivy, crossplane-fips, packer, argo-events, external-secrets-operator, mapotf, grafana, trivy-fips, gitlab-rails-ce-fips, cerbos-fips, flux-image-automation-controller-fips, pulumi-language-java, kubescape, grype-fips, coder-fips, melange,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitsign, terragrunt-fips, trivy, crossplane-fips, packer, argo-events, external-secrets-operator, mapotf, grafana, trivy-fips, gitlab-rails-ce-fips, cerbos-fips, flux-image-automation-controller-fips, pulumi-language-java, kubescape, grype-fips, coder-fips, melange,...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' in the admin console endpoints such as /web/configuration/virtualServerEdit.jsf. An attacker can execute arbitrary syst...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: serial: Fixed the race condition where tty-port wasn’t set. The commit bfc467db60b7 “serial: removed redundant ttyportlinkdevice” was reverted because ttyportlinkdevice isn’t redundant. We need to configure tty-port before callin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netconsole: Avoid out-of-band OOB reads; the message is not terminated with nul. The message passed to netconsole from the console subsystem is not guaranteed to be terminated with nul. Before the recent commit 7eab73b18630...

org.glassfish.main.admingui:console-cluster-plugin (7.0.17), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.17) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.17)

org.glassfish.main.admingui:console-common MAVEN version 7.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.17 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.10), org.glassfish.main.admingui:console-common-full-plugin (7.0.10) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.10)

org.glassfish.main.admingui:console-common MAVEN version 7.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.10 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0), org.glassfish.main.admingui:console-common-full-plugin (6.0.0) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (6.0.0)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.18), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.18) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.18)

org.glassfish.main.admingui:console-common MAVEN version 7.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.18 -...

org.glassfish.main.admingui:console-cluster-plugin (4.1), org.glassfish.main.admingui:console-common-full-plugin (4.1) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (4.1)

org.glassfish.main.admingui:console-common MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.21), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.21) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.21)

org.glassfish.main.admingui:console-common MAVEN version 7.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.21 -...

org.glassfish.main.admingui:console-cluster-plugin (3.1.2.2), org.glassfish.main.admingui:console-common-full-plugin (3.1.2.2) +6 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (3.1.2.2)

org.glassfish.main.admingui:console-common MAVEN version 3.1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 3.1.2.2 -...