185 matches found
@cubejs-backend/server (>=1.5.0, <=1.5.12), @cubejs-backend/testing-drivers (>=1.5.0, <=1.5.12) potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=1.5.0, <=1.5.12)
@cubejs-backend/server-core NPM version =1.5.0, =1.5.0, =1.5.0, =1.5.12 Source cves: CVE-2026-25958 Source advisory: OSV:GHSA-V226-32C7-X2V7...
PT-2025-45528
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.224 and prior Open WebUI versions 0.6.34 and prior Open WebUI version 0.6.33 and prior Description Open WebUI, a self-hosted artificial intelligence platform, contains a code injection vulnerability within the Direct...
EUVD-2017-10439
Malware in sbrugna...
EUVD-2009-4422
Malware in sbrugna...
EUVD-2018-14225
Malware in sbrugna...
EUVD-2025-6911
Malicious code in bioql PyPI...
EUVD-2025-7051
Malicious code in bioql PyPI...
EUVD-2025-2082
Malicious code in bioql PyPI...
EUVD-2023-45842
Malicious code in bioql PyPI...
EUVD-2025-7058
Malicious code in bioql PyPI...
CVE-2025-51643
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
CVE-2025-51643
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
CVE-2025-51643
The Meitrack T366G-L GPS Tracker (confirmed firmware T366L_Y24H131V039 ) is vulnerable because its Winbond 25Q64JVSIQ SPI flash chip lacks authentication and tamper protection. An attacker with physical access can use a standard SPI programmer and flashrom to extract the firmware, leading to the ...
CVE-2025-51643
Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...
CVE-2025-8761
A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-8761
CVE-2025-8761 affects INSTAR 2K+ and 4K, version 3.11.1 Build 1124, due to a vulnerability in the Backend IPC Server. The issue can be triggered remotely and leads to a denial of service. Public exploit information is disclosed; PT-2025-32969 notes there is currently no information about a fix in...
INSTAR 2K+和INSTAR 4K 安全漏洞
INSTAR 2K+ and INSTAR 4K are both webcams from INSTAR, a German company. A security vulnerability exists in INSTAR 2K+ and INSTAR 4K version 3.11.1 Build 1124, which originates in the Backend IPC Server component could lead to a denial of service attack...
CVE-2025-42943
CVE-2025-42943 affects SAP GUI for Windows. The vulnerability involves leakage of NTLM hashes when UNC paths are used with certain ABAP frontend services, triggered by user-side execution of SAP GUI for Windows. The underlying issue is exposure of credentials during automatic NTLM authentication,...
GHSA-PJJ3-J5J6-QJ27 HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service
Summary The HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. Details This vulnerability exists because the application does not properly handle exceptions...
