Anthropic Slack Model Context Protocol Server 安全漏洞

Anthropic Slack Model Context Protocol Server is an open standard protocol for linking large language models from Anthropic. A security vulnerability exists in Anthropic Slack Model Context Protocol Server that stems from mishandling of data, which could lead to data disclosure...

microcode_ctl: Exposure of sensitive information

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Core™ processors 10th Generation may allow an authenticated user to potentially enable information disclosure via local access...

AVTECH DVR 安全漏洞

AVTECH DVR is a digital video recording host from AVTECH Corporation. A security vulnerability exists in AVTECH DVR that originates from a server-side request forgery in the unauthenticated /cgi-bin/nobody/Search.cgi endpoint, which could lead to the disclosure of sensitive data...

Escalade GLPI plugin 访问控制错误漏洞

Escalade GLPI plugin is an open source GLPI extension plugin for GLPI Project Plugins. An Access Control Error vulnerability exists in Escalade GLPI plugin versions prior to 2.9.11, which stems from improper access control and could lead to data disclosure and workflow disruption...

The vulnerability of the chacha20_poly1305_set_key() function in the libssh library, which allows a hacker to disclose sensitive information

The vulnerability of the chacha20poly1305setkey function in the libssh library is related to the lack of checking for the returned value. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the privatekey_from_file() function in the libssh library allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the privatekeyfromfile function in the libssh library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

Trellix System Information Reporter 安全漏洞

Trellix System Information Reporter is a system information cell phone tool from Trellix USA. A security vulnerability exists in Trellix System Information Reporter version 1.0.3 and earlier, which stems from a sensitive information disclosure issue...

The vulnerability of the cv_send_blockdata() function in the Dell ControlVault3 security driver package allows a attacker to disclose protected information.

The vulnerability of the cvsendblockdata function in the Dell ControlVault3 security driver suite relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2023-47030

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService SOAP API endpoint to validate if a user exists...

The vulnerability of the `init_amd_bd()` function in the `arch/x86/kernel/cpu/amd.c` module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...

Vulnerability of the otx2_set_rxfh_context() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ethtool.c file – Marvell Ethernet network adapter support driver for the Linux operating system. This vulnerability allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the otx2setrxfhcontext function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c module – Marvell Ethernet network adapter drivers for Linux operating systems are vulnerable due to buffer overflow exploits. Exploitation of this vulnerability could allow attackers t...

Vulnerability of the mkiss_close() function in the drivers/net/hamradio/mkiss.c module – A Linux kernel network adapter driver that allows attackers to compromise the confidentiality and accessibility of protected information.

Vulnerability of the mkissclose function in the drivers/net/hamradio/mkiss.c module – The Linux kernel-based network adapter driver has a vulnerability related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Windows operating system’s Storage Management Provider component, which allows a hacker to exploit it to disclose protected information

The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Windows operating system’s Storage Management Provider component, which allows a hacker to exploit it to disclose protected information

The vulnerability of the Windows operating system’s Storage Management Provider component is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

CVE-2025-4661

A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...

USN-7573-2 xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities

USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker coul...

The vulnerability of the setWizardCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK T10 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK T10 router software is related to the issue of data being written outside the buffer in memory when processing the parameter ssid5g. Exploiting this vulnerability allows a malicious actor to compromise the...

Path Traversal Vulnerability in Various ABB Products (CNVD-2025-13774)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

USN-7570-1 python3.13, python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6 vulnerabilities

It was discovered that Python incorrectly handled certain unicode characters during decoding. An attacker could possibly use this issue to cause a denial of service. CVE-2025-4516 It was discovered that Python incorrectly handled unicode encoding of email headers with list separators in folded...

Astra Linux – Vulnerability in libarchive

A vulnerability has been identified in the libarchive library. This flaw can lead to an over-reading of the heap buffer, as the size of a filter block may exceed the Lempel-Ziv-Storer-Schieber LZSS window. This means that the library may attempt to read beyond the allocated memory buffer, which c...