5103 matches found
arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints
Summary The arcade-mcp HTTP server uses a hardcoded default worker secret "dev" that is never validated or overridden during normal server startup. As a result, any unauthenticated attacker who knows this default key can forge valid JWTs and fully bypass the FastAPI authentication layer. This...
CLSA-2025-1764598717 gstreamer1: Fix of CVE-2024-47606
CVE-2024-47606: allocator: avoid integer overflow when allocating sysmem - Fix documentation build with the newer gtk-doc...
CVE-2018-17082
creationtimestamp| type| source ---|---|--- 2025-12-01 07:51:52+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-17082.yaml 2025-12-02 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6ztowc7ky2w 2026-01-27...
CLSA-2025-1764325574 gstreamer1-plugins-good: Fix of CVE-2024-47606
CVE-2024-47606: qtdemux: avoid integer overflow when parsing Theora extension - Fix documentation build with the newer gtk-doc...
CLSA-2025-1764322066 gstreamer1: Fix of CVE-2024-47606
CVE-2024-47606: allocator: avoid integer overflow when allocating sysmem - Fix documentation build with the newer gtk-doc...
EUVD-2025-199543
Not used...
Metasploit Wrap-Up 11/14/2025
It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...
CVE-2025-64308: Unprotected Transport of Credentials
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...
Data Poisoning Vulnerabilities across Healthcare AI Architectures: A Security Threat Analysis
Healthcare AI systems face major vulnerabilities to data poisoning that current defenses and regulations cannot adequately address. We analyzed eight attack scenarios in four categories: architectural attacks on convolutional neural networks, large language models, and reinforcement learning...
OPENSUSE-SU-2025:15732-1 python-Scrapy-doc-2.13.3-2.1 on GA media
These are all security issues fixed in the python-Scrapy-doc-2.13.3-2.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20558)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20558 advisory. 6.12.0-103.40.4.2.el10uek - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343659 - x86/bugs: Move cpubugssmtupdate down Pawan...
CVE-2025-11997: Exposure of Sensitive Information to an Unauthorized Actor
The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...
Oracle Linux 8 : kernel (ELSA-2025-19931)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19931 advisory. - fs: fix UAF/GPF bug in nilfsmdtdestroy Abhi Das RHEL-116658 CVE-2022-50367 - x86/vmscape: Add old Intel CPUs to affected list Waiman Long RHEL-11428...
Oracle Linux 9 : kernel (ELSA-2025-19930)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19930 advisory. - x86/vmscape: Add old Intel CPUs to affected list Waiman Long RHEL-114270 CVE-2025-40300 - x86/vmscape: Warn when STIBP is disabled with SMT Waiman...
[SECURITY] Fedora 42 Update: qt5-qtdoc-5.15.18-1.fc42
QtDoc contains the main Qt Reference Documentation, which includes overviews, Qt topics, and examples not specific to any Qt module...
[SECURITY] Fedora 43 Update: python-fastapi-0.120.1-1.fc43
FastAPI is a modern, fast high-performance, web framework for building APIs with Python based on standard Python type hints. The key features are: =E2=80=A2 Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python frameworks available...
[SECURITY] Fedora 43 Update: python-annotated-doc-0.0.3-2.fc43
Document parameters, class attributes, return types, and variables inline, wi th Annotated...
Security Bulletin: NVIDIA RunAI - November 2025
NVIDIA has released a software update for NVIDIA® RunAI. To protect your system, download and install the latest version of NVIDIA RunAI by following the instructions on the documentation site. Go to NVIDIA Product Security...