7922 matches found
CVE-2026-21879
Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Open Redirect attack that allows malicious actors to redirect authenticated users to attacker-controlled websites. By crafting URLs such as //evil.com, attackers can bypass the...
Quantum Secure Biometric Authentication in Decentralised Systems
Biometric authentication has become integral to digital identity systems, particularly in smart cities where it en-ables secure access to services across governance, trans-portation, and public infrastructure. Centralised archi-tectures, though widely used, pose privacy and scalabil-ity challenge...
org.open-metadata:openmetadata-dist (>=1.0.0 <=1.11.13), org.open-metadata:openmetadata-mcp (>=1.10.0 <=1.11.13) potentially affected by unknown CVE via org.open-metadata:openmetadata-service (>=1.0.0-alpha <=1.11.3)
org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0, =1.10.0, =1.11.13 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENMETADATA-14912636...
Quantum Key Distribution without Authentication and Information Leakage
Quantum key distribution QKD is the most widely studied quantum cryptographic model that exploits quantum effects to achieve information-theoretically secure key establishment. Conventional QKD contains public classical post-processing steps that require authentication to prevent impersonation an...
perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS
A flaw was found in Perl's CPAN, which doesn't check TLS certificates when downloading content. This happens due to verifySSL missing when suing the HTTP::Tiny library during the connection. This may allow an attacker to inject into the network path and perform a Man-In-The-Middle attack, causing...
Pervasive Vulnerability Analysis and Defense for QKD-Based Quantum Private Query
Quantum Private Query QPQ based on Quantum Key Distribution QKD is among the most practically viable quantum communication protocols, with application value second only to QKD itself. However, prevalent security vulnerabilities in the post-processing stages of most existing QKD-based QPQ protocol...
[SECURITY] Fedora 42 Update: golang-github-evanw-esbuild-0.24.2-4.fc42
This is a JavaScript bundler and minifier. It packages up JavaScript and TypeScript code for distribution on the web...
[SECURITY] Fedora 43 Update: golang-github-evanw-esbuild-0.24.2-6.fc43
This is a JavaScript bundler and minifier. It packages up JavaScript and TypeScript code for distribution on the web...
Malicious code in extrazip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...
CVE-2025-67014
Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint...
CVE-2025-68938
A flaw was found in Gitea. An incorrect authorization allows an authenticated user with minimal privileges to delete project releases, causing a loss of availability of project assets and distribution history. Mitigation Mitigation for this issue is either not available or the currently available...
CVE-2025-67013
The CVE-2025-67013 entry concerns ETL Systems Ltd DEXTRA Series Digital L-Band Distribution System v1.8. The web management interface does not implement CSRF protections (no tokens, no Origin/Referer validation) on critical configuration endpoints, per Red Hat and NVD entries. Affected component:...
CVE-2025-67014
Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint...
EUVD-2025-205445
Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 allows unauthenticated attackers to access an administrative endpoint...
CVE-2025-67013
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery CSRF protection mechanisms no tokens, no Origin/Referer validation on critical configuration endpoints...
DEV 7113 RF over Fiber Distribution System 安全漏洞
The DEV 7113 RF over Fiber Distribution System is a chassis from DEV Germany that is used in telecommunications infrastructure. A security vulnerability exists in the DEV 7113 RF over Fiber Distribution System version 32-0078 H.01, which stems from improper access control and could lead to an...
PT-2025-53596
Name of the Vulnerable Software and Affected Versions DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 Description An issue exists in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-0078 H.01 related to access control. An unauthenticated attacker...
CVE-2025-67108
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...
CVE-2025-65865
CVE-2025-65865 concerns an integer overflow in eProsima Fast-DDS v3.3 that can lead to a Denial of Service (DoS) via crafted input. Multiple sources (Red Hat, NVD, OSV, OSV Debian/Ubuntu, CVE listing, Snyk) identify Fast-DDS 3.3 as affected. The Snyk entry specifies the vulnerable code path in Me...