8896 matches found
[SECURITY] [DLA 4331-1] https-everywhere security update
Debian LTS Advisory DLA-4331-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 14, 2025 https://wiki.debian.org/LTS Package : https-everywhere Version : 2025.10.14-0+deb11u1 Debian Bug : 1118030 1118045 The Firefox extension HTTPS Everywhere used to enforc...
CVE-2025-47856: Improper Neutralization of Special Elements used in an OS Command
Two improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests...
DLA-4331-1 https-everywhere - security update
Bulletin has no description...
CVE-2025-59921: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs...
Debian: Security Advisory (DLA-4331-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JLSEC-2025-27 curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...
CVE-2025-52632: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...
The server for managing Fortinet FortiClient Enterprise Management Server programs is vulnerable, due to insufficient checking of incoming requests. This vulnerability allows attackers to execute SSRF attacks.
The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server lies in the insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending a specially crafted HTTP or HTTPS request...
EUVD-2025-33278
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...
CVE-2025-36636
creationtimestamp| type| source ---|---|--- 2025-10-08 15:48:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115339328547767395...
EUVD-2021-13333
Malware in sbrugna...
EUVD-2020-20048
Malware in sbrugna...
EUVD-2021-13909
Malware in sbrugna...
EUVD-2017-12053
Malware in sbrugna...
EUVD-2017-12052
Malware in sbrugna...
EUVD-2002-2392
Malware in sbrugna...
EUVD-2019-4388
Malware in sbrugna...
EUVD-2010-0627
Malware in sbrugna...