CVE-2025-2048

creationtimestamp| type| source ---|---|--- 2025-04-01 06:31:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9840...

Improper Authorization

Mattermost is vulnerable to an Improper Authorization. The vulnerability is due to insufficient enforcement of channel conversion restrictions due to a flaw that allows users with permission to convert public channels to private ones to also convert private channels to public...

Brocade Fabric OS Remote Code Execution / Information Disclosure

Brocade Fabric OS versions prior to 9.2.2 suffer from 10 vulnerabilities including, but not limited to, remote code execution, information disclosure, man-in-the-middle, weak cryptography, and hardcoded key vulnerabilities. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Titl...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1338)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2025-1314)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : dhcp (EulerOS-SA-2025-1314)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...

EulerOS 2.0 SP13 : dhcp (EulerOS-SA-2025-1331)

According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1321)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : openssl (EulerOS-SA-2025-1321)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...

EulerOS 2.0 SP13 : openssl (EulerOS-SA-2025-1338)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact...

CVE-2024-54805

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9774...

CVE-2024-54808

creationtimestamp| type| source ---|---|--- 2025-03-31 21:31:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9771...

GHSA-HQQC-JR88-P6X2

creationtimestamp| type| source ---|---|--- 2025-03-31 19:31:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9752...

CVE-2025-31576

creationtimestamp| type| source ---|---|--- 2025-03-31 16:33:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9690...

CVE-2025-31562

creationtimestamp| type| source ---|---|--- 2025-03-31 14:32:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9667...

Zulip server 安全漏洞

Zulip server is an open source team chat application from Zulip, Inc. in the United States. A security vulnerability exists in Zulip server versions prior to 10.0, which stems from a data export feature that discloses private data, including user agent types and private channel subject headings...

CVE-2025-27149: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data export to organization administrators feature in Zulip leaks private data. The collection of user-agent types identifying specific integrations or HTTP libraries E.g.,...

SUSE CVE-2025-27715

Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...

SUSE CVE-2025-27933

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to fail to enforce channel conversion restrictions, which allows members with permission to convert public channels to private ones to also convert private ones to public...

SUSE CVE-2025-30179

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries...