CVE-2026-85179

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload...

CVE-2026-85179

Label Studio versions through 1.23.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the webhook functionality (specifically in webhooks/utils.py). The application fails to validate webhook URLs , allowing authenticated users to dispatch outbound requests to internal network...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

PT-2026-63387

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.6.0 through 1.25.1 Description The view local data and view local datas commands of unbound-control create a bare local zones tree for a configured named view that initially contains no local data. This process...

CVE-2025-1918 vulnerabilities

Vulnerabilities for packages: chromium...

Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF

Summary When verifying an uploaded certificate, lemur/certificates/verify.py extracts the CRL Distribution Point URL and the OCSP responder URL directly from the certificate's extensions and issues outbound requests to those URLs without scheme restriction or destination allow-listing. An...

EUVD-2011-4649

Malware in sbrugna...

EUVD-2011-4771

Malware in sbrugna...

EUVD-2023-57830

Malicious code in bioql PyPI...

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

CVE-2011-4731

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by admin/home/admin and certain other files...

Fedora: Security Advisory (FEDORA-2025-762804f16e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated chromium-browser-stable packages fix security vulnerabilities

High CVE-2025-1914: Out of bounds read in V8. Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Medium CVE-2025-1916: Use after free in Profiles. Medium CVE-2025-1917: Inappropriate Implementation in Browser UI. Medium CVE-2025-1918: Out of bounds read...

Chromium: CVE-2025-1918 Out of bounds read in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

OPENSUSE-SU-2025:0084-1 Security update for chromium

Chromium was updated to 134.0.6998.35 stable release 2025-03-04 boo1238575: CVE-2025-1914: Out of bounds read in V8 CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools CVE-2025-1916: Use after free in Profiles CVE-2025-1917: Inappropriate Implementation in Brows...

Linux Distros Unpatched Vulnerability : CVE-2025-1918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted...

CVE-2025-1918

creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6481 2025-03-05 06:04:08+00:00| seen| https://t.me/cvedetector/19580 2025-03-05 07:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv67ghe2o 2025-03-06...

CVE-2025-1918

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. Chromium security severity: Medium...

CVE-2025-1918

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. Chromium security severity: Medium...