908 matches found
CVE-2025-55204 muffon has One-click Remote Code Execution via XSS and Custom URL Handling
muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution RCE vulnerability in. An attacker can exploit this issue by embedding a specially crafted muffon:// link on any website they control. When a victim visits the site or clic...
muffon 代码注入漏洞
muffon is a music playback software by Aleksey Shpakovsky Personal Developer. A code injection vulnerability exists in muffon versions prior to 2.3.0, which stems from mishandling of specially crafted muffon links that could lead to remote code execution...
PT-2026-1311
Name of the Vulnerable Software and Affected Versions muffon versions prior to 2.3.0 Description muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a Remote Code Execution RCE issue. An attacker can exploit this by embedding a specially crafted muffon://...
CVE-2025-65000
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000
CVE-2025-65000 affects Checkmk (Linux Remote alert handlers rule). SSH private keys were exposed in the HTML source of the rule page for Checkmk 2.3.0 and all versions up to 2.4.0p18, potentially allowing unauthorized triggering of predefined alert handlers on affected hosts. The Red Hat, NVD, Ub...
Deserialization of Untrusted Data
Overview isaaclab is an Isaac Lab Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can achieve arbitrary code execution by providing specially crafted data to be deserialized. Details Serialization is a process of...
EUVD-2023-27815
Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.3.0...
PT-2025-50095
Name of the Vulnerable Software and Affected Versions Brainstorm Force Spectra versions through 2.3.0 Description A missing authorization issue exists in Brainstorm Force Spectra, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Brainstorm...
EUVD-2025-198047
Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information...
Checkmk 安全漏洞
Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions 2.2.0, 2.3.0, and 2.4.0 up to and including 2.4.0p16, which stems from insufficient validation of REST API endpoint privileges and could lead to unauthorized actions or information disclosu...
Malicious code in node-calculator-f4d5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342de6f4f54c5a0a4df856c6dc87100b08337f11e82519b0cc2e99c90b26c9f0 The package node-calculator-f4d5 was found to contain malicious code. Source: ossf-package-analysis...
CVE-2025-32919 Privilege Escalation in Windows License plugin for Checkmk Windows Agent
Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 EOL...
EUVD-2016-1986
Malware in sbrugna...
EUVD-2017-18605
Malware in sbrugna...
EUVD-2014-0097
Malware in sbrugna...
EUVD-2006-1324
Malware in sbrugna...
EUVD-2020-22015
Malware in sbrugna...
EUVD-2020-16922
Malware in sbrugna...