185 matches found
CVE-2024-47167-Environment-Setup
Components: 1. gradiocontainer: hosts internal HTTP server on port 5678 2. targetinternalserver: launches a python app using vulnerable version of gradio 4.40.0...
CLSA-2026-1786793411 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 16 @angular packages to address 2 CVEs. Fixed in 13.3.11-tuxcare.3...
GHSA-5FJH-93MH-6XVW vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-6F82-HFHW-X2GC vulnerabilities
Vulnerabilities for packages: linux-gcp...
Photon OS 5.0: Openssl PHSA-2026-5.0-92-0878
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0878. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2023-5.0-91-0148
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0148. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-5678
creationtimestamp| type| source ---|---|--- 2026-04-06 21:20:59+00:00| seen| Telegram/8Tvza3k4qy2IjH2O3f59isxEIVitW69EvgGBkLG1GZexI3E 2026-09-29 23:46:07+00:00| seen| https://bsky.app/profile/venezuelanewschepa.bsky.social/post/3mwoz6oczha2t 2026-09-29 23:46:11+00:00| seen|...
CVE-2026-5678
CVE-2026-5678 affects Totolink A7100RU (firmware 7.4cu.2313_b20191024). The vulnerability is in the /cgi-bin/cstecgi.cgi function setScheduleCfg, where manipulating the mode argument enables an OS command injection. Exploitation can be performed remotely, and a public exploit is available. Impact...
PT-2026-25544
Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A weakness exists in the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Manipulation of the mode argument can lead to operating system command injection. This attack can be...
CGA-MV8J-5QC2-5678
Bulletin has no description...
MiracleLinux 8 : openssl-1.1.1k-12.el8_9 (AXSA:2024-7354:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7354:01 advisory. openssl: Excessive time spent checking DH keys and parameters CVE-2023-3446 OpenSSL: Excessive time spent checking DH q parameter value CVE-2023-381...
EUVD-2012-2545
Malware in sbrugna...
EUVD-2005-2584
Malware in sbrugna...
CVE-2021-5678
creationtimestamp| type| source ---|---|--- 2025-09-01 17:58:46+00:00| seen| https://gist.github.com/Darkcrai86/7dfb0d3968baac2618392890b93e72e6...
CVE-2034-5678
creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:57+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:41+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...
CVE-2025-5678 Kadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘redirectURL’ parameter in all versions up to, and including, 3.5.10 due to insufficient input sanitization and output escaping. This makes it possible for...
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via redirectURL Parameter vulnerability discovered by Asaf Mozes in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.5.10...
CVE-2020-5678
Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...
