e-Excellence U-Office Force 代码问题漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A code issue vulnerability exists in e-Excellence U-Office Force, which originates from an arbitrary file upload and could allow a remote attacker to upload and execute a Web Shell backdoor to...

CVE-2025-27403

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azu...

Description of the security update for Excel 2016: March 11, 2025 (KB5002696)

None None...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.10 Images Update

New images are available for Red Hat build of Keycloak 26.0.10 and Red Hat build of Keycloak 26.0.10 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Horcrux Double Sign Possibility

Horcrux Incident Disclosure: Possible Double-Sign Summary On March 6, 2025, a Horcrux user 01node experienced a double-signing incident on the Osmosis network, resulting in a 5% slash penalty approximately 75,000 OSMO or $20,000 USD. After thorough investigation, we have identified a race conditi...

CVE-2025-2040 zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack ca...

EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing

The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing campaigns to deploy information stealers and ransomware, while also working on a new product called EncryptRAT. "EncryptHub has been observed targeting users of popular applications, ...

Linux Distros Unpatched Vulnerability : CVE-2017-3533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE:...

Linux Distros Unpatched Vulnerability : CVE-2018-2582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 8u152 and...

Linux Distros Unpatched Vulnerability : CVE-2017-3544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE:...

CVE-2024-51954

There is an improper access control issue in ArcGIS Server versions 11.3 and below on Windows and Linux which, under unique circumstances, could allow a remote, low‑privileged authenticated attacker to access secure services published to a standalone unfederated ArcGIS Server instance. Successful...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

io.quarkus:quarkus-amazon-lambda (0.13.0), io.quarkus:quarkus-amazon-lambda-deployment (0.13.0) +8 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.13.0)

io.quarkus:quarkus-resteasy MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.13.0 - io.quarkus:quarkus-amazon-lambda-deployment 0.13.0 -...

io.quarkus:quarkus-elytron-security-deployment (0.23.0), io.quarkus:quarkus-elytron-security-oauth2-deployment (0.23.0) +14 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (0.23.0)

io.quarkus:quarkus-resteasy MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-elytron-security-deployment 0.23.0 -...

io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests (2.0.0.beta2), io.quarkiverse.operatorsdk:quarkus-operator-sdk-samples (2.0.0.beta2) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.0.1.final)

io.quarkus:quarkus-resteasy MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.operatorsdk:quarkus-operator-sdk-integration-tests 2.0.0.beta2 -...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.1.2.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.1.2.final) +95 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.1.2.final)

io.quarkus:quarkus-resteasy MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.1.2.final -...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.15, <=1.5.17), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.15, <=1.5.17) +29 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.8.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.15, =1.5.15, =1.5.15, =1.5.15, =1.5.15...

com.boozallen.aissemble:aissemble-metadata (>=1.7.0-rc2, <=1.7.0), com.boozallen.aissemble:aissemble-pipeline-invocation (>=1.7.0-rc2, <=1.7.0) +25 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.8.3.final)

io.quarkus:quarkus-resteasy MAVEN version 2.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - com.boozallen.aissemble:aissemble-metadata =1.7.0-rc2, =1.7.0-rc2, =1.7.0-rc2, =1.7.0-rc2,...