Redis: undisclosed vulnerability (ZAI-2026-C5036K)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-OQ95R5)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-Q83NXF)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-1I979K)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-OFI5R9)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-IWUFUF)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-NFJ0JP)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-EO1CQE)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-5YPF8J)

Not disclosed. Details are not yet publicly disclosed...

OPENSUSE-SU-2025:20121-1 Security update for redis

This update for redis fixes the following issues: - Updated to 8.2.3 boo1252996 CVE-2025-62507 https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - CVE-2025-62507 Bug in XACKDEL may lead to stack overflow and potential RCE - Bug fixes - HGETEX: A missing numfields argument when...

OESA-2025-2862 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

CVE-2025-15172

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

CVE-2025-15172 SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

CVE-2025-15172

The CVE-2025-15172 entry concerns SohuTV CacheCloud

CVE-2025-15172 SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from a misuse of the function advancedAnalysis in the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function preview in file...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function taskQueueList in the file src/main/java/com/sohu/cache/web/controller/TaskController.java...

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from a misuse of the function redirectNoPower in the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java...

curl: Protocol Smuggling / CRLF Injection via Gopher Protocol allows Arbitrary Command Injection

Summary: I have discovered that the Gopher protocol implementation in curl fails to properly sanitize newline characters %0d%0 in the selector path. This allows an attacker to inject arbitrary TCP commands when curl connects to a target server via gopher://. This vulnerability enables Protocol...