25330 matches found
CVE-2025-64752 grist-core has path to server-side requests via websocket
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
org.keycloak/keycloak-quarkus-server: Unable to restrict access to the admin console
A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least via ha-proxy, as it can be tricked to using relative/non-normalized paths to access the /admin application path relative to...
GHSA-MHJQ-8C7M-3F7P Milvus Proxy has a Critical Authentication Bypass Vulnerability
Impact What kind of vulnerability is it? Who is impacted? An unauthenticated attacker can exploit this vulnerability to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modif...
EUVD-2025-50814
Milvus Proxy has a Critical Authentication Bypass Vulnerability...
Milvus Proxy has a Critical Authentication Bypass Vulnerability
Impact What kind of vulnerability is it? Who is impacted? An unauthenticated attacker can exploit this vulnerability to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modif...
EUVD-2025-177751
Malicious code in mu-dog-proxy-decode-unix npm...
Malicious code in parse-kappa-void-proxy-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176587
Malicious code in route-proxy-alpha-export-monitor npm...
EUVD-2025-176536
Malicious code in sandbox-interface-async-awk-proxy npm...
EUVD-2025-177467
Malicious code in omega-xml-proxy-runtime-analyze npm...
EUVD-2025-176946
Malicious code in proxy-rain-decode-xi-error npm...
MAL-2025-188862 Malicious code in promise-meta-node-orchestrate-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5d73de94d6841eb4dd5821707f352f8bee1c512dad1e7a52a134db5697862e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188564 Malicious code in parse-kappa-void-proxy-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176952
Malicious code in proxy-cache-beta-iota-water npm...
EUVD-2025-176380
Malicious code in signal-quick-proxy-data-web npm...
EUVD-2025-175664
Malicious code in warn-class-proxy-cron-earth npm...
EUVD-2025-176947
Malicious code in proxy-process-rho-chi-web npm...
EUVD-2025-177622
Malicious code in new-transpile-alpha-log-proxy npm...