CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...

libssh 安全漏洞

libssh is a C development package from the libssh organization for accessing SSH services, which is capable of executing remote commands, file transfers, as well as providing a secure transport channel for remote programs. A security vulnerability exists in libssh that stems from memory not being...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...

Hotfix update for Exchange Server 2016 CU23 HU18: September 8, 2025 (KB5066370)

None None...

Hotfix update for Exchange Server Subscription Edition RTM HU2: September 8, 2025 (KB5066373)

None None...

Hotfix update for Exchange Server 2019 CU15 HU4: September 8, 2025 (KB5066372)

None None...

Hotfix update for Exchange Server 2019 CU14 HU7: September 8, 2025 (KB5066371)

None None...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle url Once a victim clicks this link, evil.com will receive the cookies...

php-saml

This is a PHP library for implementing SAML Security Assertion Markup Language authentication and authorization. It is a toolkit for adding SAML support to PHP software. The library is compatible with PHP 5.3.2 and later versions, and it uses the xmlseclibs library for XML encryption and...

Malicious code in exchange-liquid-higher (npm)

The package exchange-liquid-higher was found to contain malicious code...

Malicious code in nice-exchange-instead (npm)

The package nice-exchange-instead was found to contain malicious code...

MAL-2025-45312 Malicious code in nice-exchange-instead (npm)

The package nice-exchange-instead was found to contain malicious code...

MAL-2025-44192 Malicious code in exchange-liquid-higher (npm)

The package exchange-liquid-higher was found to contain malicious code...

CVE-2025-58624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falselight Exchange Rates exchange-rates allows Stored XSS.This issue affects Exchange Rates: from n/a through = 1.2.5...

: null pointer dereference in libssh kex session id calculation

...

Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

...

CLSA-2025-1756928002 iperf3: Fix of CVE-2024-53580

CVE-2024-53580: fix segmentation violation in iperfexchangeparameters function...

CVE-2025-58624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falselight Exchange Rates exchange-rates allows Stored XSS.This issue affects Exchange Rates: from n/a through = 1.2.5...

WordPress Exchange Rates Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Exchange Rates versions = 1.2.5...