630 matches found
CVE-2026-25893 FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has...
CVE-2026-25893
CVE-2026-25893 affects FUXA, a web-based Process Visualization (SCADA/HMI/Dashboard) platform. The issue is an authentication bypass via the heartbeat refresh API that lets an unauthenticated, remote attacker gain administrative access and potentially execute arbitrary code on the server. This vu...
CVE-2026-25893 FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has...
CVE-2026-25893
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has...
CVE-2026-25893: Improper Authorization
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to gain administrative access via the heartbeat refresh API and execute arbitrary code on the server. This issue has...
FUXA 授权问题漏洞
FUXA is a web-based process visualization software developed by frangoteam. Versions of FUXA prior to 1.2.10 had an authorization vulnerability. This vulnerability stemmed from an authentication bypass in the heartbeat refresh API, which could allow unverified remote attackers to gain administrat...
PT-2026-7184
Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.2.10 Description FUXA is a web-based Process Visualization software. A flaw exists that allows a remote, unauthenticated attacker to gain administrative access and execute arbitrary code on the server. This is possible...
Exploit for Out-of-bounds Read in Openssl
CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...
Azure Linux 3.0 Security Update: kernel (CVE-2024-41006)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41006 advisory. - In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in...
MiracleLinux 4 : pacemaker-1.1.10-14.AXS4.2 (AXSA:2014-039:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-039:01 advisory. Pacemaker is an advanced, scalable High-Availability cluster resource manager for Linux-HA Heartbeat and/or Corosync. It supports n-node clusters with...
Malicious code in @posthog/heartbeat-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0402071ebf395126c5e1e90681622f203d9744eca75a1f2061a6a2d030cdcc The package @posthog/heartbeat-plugin was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199448
Malicious code in @posthog/heartbeat-plugin npm...
MAL-2025-191291 Malicious code in @posthog/heartbeat-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0402071ebf395126c5e1e90681622f203d9744eca75a1f2061a6a2d030cdcc The package @posthog/heartbeat-plugin was found to contain malicious code. Source: google-open-source-security...
The vulnerability of the nr_heartbeat_expiry() function in the net/netrom/nr_timer.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nrheartbeatexpiry function in the net/netrom/nrtimer.c module of the Linux operating system is related to the lack of memory release after the effective expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Resource Shutdown or Release (CVE-2024-41006)
netrom: a memory leak in nrheartbeatexpiry. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503530; scriptversion"1.3";...
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
EUVD-2007-4188
Malware in sbrugna...
EUVD-2010-2068
Malware in sbrugna...