CVE-2025-2243 SSRF in GravityZone Console via DNS Truncation (VA-12634)

A server-side request forgery SSRF vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue...

CVE-2025-2244 Insecure PHP deserialization issue in GravityZone Console (VA-12634)

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write,...

CVE-2025-2244 Insecure PHP deserialization issue in GravityZone Console (VA-12634)

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write,...

PT-2025-14873 · Bitdefender · Bitdefender Gravityzone Console

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Console versions prior to 6.41.2.1 Description: A server-side request forgery SSRF issue allows an attacker to bypass input validation logic using leading characters in DNS requests. This could potentially be used for...

Bitdefender GravityZone Console code-related vulnerabilities

Bitdefender GravityZone Console is a centralized cybersecurity management platform from Bitdefender Romania, designed to provide organizations with full visibility and control over their security infrastructure. A code issue vulnerability exists in Bitdefender GravityZone Console versions prior t...

PT-2025-14874 · Bitdefender · Bitdefender Gravityzone Console

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Console affected versions not specified Description: A vulnerability exists in the sendMailFromRemoteSource method in Emails.php, which unsafely uses the php unserialize function on user-supplied input without...

CVE-2025-2244: Deserialization of Untrusted Data

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP object injection, perform a file write,...

CVE-2025-2243: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue...

MAL-2025-3100 Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hide-console-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-49V8-P6MM-3PFJ Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the zkClusterKey parameter, which is passed unescaped to an SQL query in executorCount. An attacker can execute arbitrary SQL commands by via the /console/dashboard/executorCount?zkClusterKey endpoint. Remediation Ther...

com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (>=3.0.0-m5, <=3.5.1)

com.vip.saturn:saturn-console MAVEN version =3.0.0-m5, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

com.vip.saturn:saturn-it (2.1.3) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.3)

com.vip.saturn:saturn-console MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.3 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-it (2.1.5) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.5)

com.vip.saturn:saturn-console MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.5 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-it (2.1.2) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.2)

com.vip.saturn:saturn-console MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.2 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-it (2.1.3-rc1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.3-rc1)

com.vip.saturn:saturn-console MAVEN version 2.1.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.3-rc1 Source cves: CVE-2025-29085 Source advisory:...

com.vip.saturn:saturn-it (2.1.4) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.4)

com.vip.saturn:saturn-console MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.4 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...