8629 matches found
CVE-2025-11538
Keycloak is affected by CVE-2025-11538 in versions prior to 26.4.4 where enabling debug mode (--debug) binds the JDWP port to all interfaces (0.0.0.0), exposing the debug port on the local network. This potentially allows a local-network attacker to attach a remote debugger and achieve remote cod...
CVE-2025-11538 Keycloak-server: debug default bind address
A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...
CVE-2025-11538
A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...
Security update for cargo-packaging, rust-bindgen
This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0. Patch...
SUSE-SU-2025:4091-1 Security update for cargo-packaging, rust-bindgen
This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: - Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0...
EUVD-2025-176933
Malicious code in public-process-wind-debug-view npm...
EUVD-2025-179372
Malicious code in decrypt-sun-mock-rain-debug npm...
EUVD-2025-180485
Malicious code in air-query-sun-void-debug npm...
EUVD-2025-175551
Malicious code in wind-psi-zeta-debug-zeta npm...
EUVD-2025-178448
Malicious code in import-debug-compress-byte-long npm...
EUVD-2025-176588
Malicious code in route-permission-grep-quick-debug npm...
Malicious code in wind-psi-zeta-debug-zeta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb1fbb789018c346a5f6f4730f72aeec7f3a6b735977e2c9cd571c4d32b0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179385
Malicious code in debug-tau-wind-gamma-sun npm...
EUVD-2025-179724
Malicious code in class-debug-private-decrypt-slow npm...
EUVD-2025-177179
Malicious code in pi-permission-debug-decrypt-slow npm...
EUVD-2025-177885
Malicious code in meta-code-debug-key-old npm...
Malicious code in debug-char-code-double-encode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179117
Malicious code in enum-interface-grep-reject-debug npm...