Lucene search
+L

35155 matches found

osv_cve
osv_cve
•added 2025/07/04 1:13 p.m.•26 views

CVE-2025-46733 REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In version 4.5.0, using a specially crafted tee-supplicant binary running in REE userspace, an attacker can trigger a panic in a TA that...

7.9CVSS6.4AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/07/03 2:06 p.m.•31 views

n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

Summary Denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. Impact This is a Denial of Service DoS vulnerability that allows authenticated attackers to cause service unavailability through malformed filesystem URI...

4.9CVSS6.8AI score0.00472EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2025/07/03 2:06 p.m.•18 views

GHSA-PR9R-GXGP-9RM8 n8n Vulnerable to Denial of Service via Malformed Binary Data Requests

Summary Denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. Impact This is a Denial of Service DoS vulnerability that allows authenticated attackers to cause service unavailability through malformed filesystem URI...

4.9CVSS6AI score0.00472EPSS
SaveExploits0References5
CVE
CVE
•added 2025/07/03 12:16 p.m.•78 views

CVE-2025-49595

CVE-2025-49595 affects n8n prior to 1.99.0, where the /rest/binary-data endpoint is vulnerable to DoS via empty filesystem URIs (filesystem:// or filesystem-v2://). Authenticated attackers can exhaust resources and disrupt service (including n8n.cloud), with observed HTTP/2 524 timeouts. The issu...

4.9CVSS6.4AI score0.00472EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2025/07/03 12:16 p.m.•13 views

CVE-2025-49595

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

6.9CVSS0.00472EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/07/03 12:00 a.m.•10 views

Multiple Printer Devices Information Disclosure (CVE-2024-51977)

Binary data printercve-2024-51977.nbin...

5.3CVSS7.9AI score0.4663EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/03 12:00 a.m.•5 views

CVE-2025-49595: Uncontrolled Resource Consumption

n8n is a workflow automation platform. Prior to version 1.99.0, there is a denial of Service vulnerability in /rest/binary-data endpoint when processing empty filesystem URIs filesystem:// or filesystem-v2://. This allows authenticated attackers to cause service unavailability through malformed...

4.9CVSS5.8AI score0.00472EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/30 11:15 p.m.•23 views

CVE-2025-6931

A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulnerability is the function generatepassfrommac of the file /bin/httpd of the component Root Password Generation Handler. The manipulation leads to insufficient entropy. The attack...

7.4CVSS4.2AI score0.0223EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2025/06/30 12:00 a.m.•8 views

Microsoft Windows SDK Installed (Windows)

Binary data windowssdkinstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
•added 2025/06/30 12:00 a.m.•17 views

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Ltd.

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2025/06/30 12:00 a.m.•21 views

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18468)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2025/06/30 12:00 a.m.•21 views

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18469)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/06/30 12:00 a.m.•21 views

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2 suffers from a code execution vulnerability that originates from an unverified system function in the bin/goahead file, which can be exploited by an attacker to cause remote code execution...

9.8CVSS8.4AI score0.01032EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•10 views

CVE-2023-28905: Heap-based Buffer Overflow

A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part...

8CVSS6.8AI score0.00418EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•6 views

CVE-2023-28903: Integer Overflow or Wraparound

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system...

3.3CVSS5.9AI score0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•9 views

CVE-2023-28902: Integer Underflow (Wrap or Wraparound)

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part...

3.3CVSS5.9AI score0.00229EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/06/27 6:31 a.m.•23 views

OneClik Red Team Campaign Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors

Cybersecurity researchers have detailed a new campaign dubbed OneClik that leverages Microsoft's ClickOnce software deployment technology and bespoke Golang backdoors to compromise organizations within the energy, oil, and gas sectors. "The campaign exhibits characteristics aligned with...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/06/27 12:00 a.m.•8 views

Broadcom Brocade FabricOS Detection

Binary data brocadefabricosdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/06/27 12:00 a.m.•8 views

GStreamer Installed (macOS)

Binary data macosgstreamerinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/06/26 12:00 a.m.•6 views

Ruby Gem Modules Installed (macOS)

Binary data rubygemmodulesmacosinstalled.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder