GLPI 安全漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

EUVD-2024-55355

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

FNT Command 安全漏洞

FNT Command is a data center infrastructure management platform from FNT Germany. A security vulnerability exists in FNT Command version 13.4.0, which stems from a code execution vulnerability in the C Base Module...

CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

PT-2025-51247

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

CVE-2024-44598

CVE-2024-44598 concerns FNT Command 13.4.0, which is reported as vulnerable to code execution via the C Base Module . The available sources consistently describe a code execution flaw in this module, but do not provide explicit technical details about the vulnerable component, affected versions b...

CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module...

SUSE SLED15: libQt6Concurrent6 / libQt6Core6 / libQt6DBus6 / libQt6Gui6 / etc (SUSE-SU-2025:03599-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03599-1 advisory. - CVE-2025-5455: processing of malformed data in qDecodeDataUrl can trigger assertion and cause...

Exploit for Deserialization of Untrusted Data in Facebook React

⚛️ React2Shell CVE-2025-55182 !Pythonhttps://img.shields...

MaxKB 竞争条件问题漏洞

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A competitive condition issue vulnerability exists in MaxKB 2.3.1 and earlier versions, which stems from a tool module that allows an attacker to escape the sandbox...

SUSE: Security Advisory (SUSE-SU-2025:1004-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2025-65803

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service DoS via supplying a crafted PSD file. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2025-65825

The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and...

Security Bulletin: A vulnerability in RedHat UBI affects IBM Robotic Process Automation for Cloud Pak and may result in denial of service (CVE-2024-12243).

Summary A vulnerability in RedHat UBI affects IBM Robotic Process Automation for Cloud Pak and may result in a denial of service. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address this vulnerability...

CVE-2023-53764

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Handle lock during peerid find ath12kpeerfindbyid requires that the caller hold the ab-baselock. Currently the WBM error path does not hold the lock and calling that function, leads to the following lockdepassertin...

Malicious Package

Overview facts-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview accounts-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...