19292 matches found
UBUNTU-CVE-2025-65000
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000
CVE-2025-65000 affects Checkmk (Linux Remote alert handlers rule). SSH private keys were exposed in the HTML source of the rule page for Checkmk 2.3.0 and all versions up to 2.4.0p18, potentially allowing unauthorized triggering of predefined alert handlers on affected hosts. The Red Hat, NVD, Ub...
CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-60062
creationtimestamp| type| source ---|---|--- 2025-12-18 09:49:20+00:00| seen| https://gist.github.com/Darkcrai86/a4aae3d5fbfa6cbe0add53dd7cad1a26 2025-12-18 16:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabnfm3kma2c...
PT-2025-52229
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000: Improper Removal of Sensitive Information Before Storage or Transfer
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
Checkmk 安全漏洞
Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0p18 and earlier, which stems from the exposure of an SSH private key in the HTML source code of the rules page, which could lead to the unauthorized triggering of a predefined alert...
EUVD-2025-203893
Malicious code in xbox-bottomnav npm...
CVE-2025-40353
In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copyhighpage The arm64 copyhighpage assumes that the destination page is newly allocated and not MTE-tagged PGmtetagged unset and warns accordingly. However, following comm...
Malicious Package
Overview mona-speedy-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
CVE-2025-68054
creationtimestamp| type| source ---|---|--- 2025-12-16 09:29:05+00:00| seen| https://gist.github.com/Darkcrai86/cd0e02e5dff5aa17579ba8fe5175a78b...
Linux Distros Unpatched Vulnerability : CVE-2025-40350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: RX, Fix generating skb from non-linear xdpbuff for striding RQ XDP programs can change the layout of an xdpbuff through bpfxdpadjusttail and...
CVE-2025-57919
creationtimestamp| type| source ---|---|--- 2025-12-15 12:58:40+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/al25-019-vulnerabilities-impacting-fortinet-products-forticloud-sso-login-authentication-bypass-cve-2025-59718-cve-2025-59719...
CVE-2025-9116
creationtimestamp| type| source ---|---|--- 2025-12-15 08:55:30+00:00| seen| https://gist.github.com/Darkcrai86/1dd1e83c9642f7f4e5319c0dcd70ef79...
MAL-2025-192569 Malicious code in @ikarem/telemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43d2a07b55a1387aa741edace01850ec9f79a58baac8ee1897610e2b8e77cb8 The package @ikarem/telemetry was found to contain malicious code. Source: ghsa-malware...
Remote Code Execution (RCE)
Apache DolphinScheduler is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation of user input in alert scripts, which allows an attacker to execute arbitrary shell scripts on the server...