Denial Of Service (DoS)

mcp is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of exceptions triggered after establishing a streamable HTTP session, which allows an attacker to cause a ClosedResourceError on the server side...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling continuously consumed OOB skbs, which could lead to reuse after release...

webkitgtk: Processing maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

The vulnerability of the tracing/trigger component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel component, “tracing/trigger”, is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect handling of logical operations, allows attackers to escalate their privileges.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the ssh_kdf() function in the libssh library, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the sshkdf function in the libssh library is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Case ERP SQL注入漏洞

Case ERP is an enterprise resource planning system from Case Inc. A SQL injection vulnerability exists in Case ERP versions prior to V2.0.1, which stems from improper neutralization of special elements in SQL commands, which can lead to SQL injection...

Security Bulletin: Mongoose Improper Handling of Nested $where in populate() Match Allows Search Injection

Summary Mongoose improper handling of nested $where in populate match allows search injection due to incomplete fix for CVE-2024-53900. Vulnerability Details CVEID:CVE-2025-23061 DESCRIPTION: Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search...

PHPGurukul Notice Board System 代码注入漏洞

Notice Board System is a bulletin board system. Notice Board System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameters Title/Description in the file /admin/manage-notices.php, which can be...

HTML Injection

starcitizentools/citizen-skin is vulnerable to HTML Injection. The vulnerability is due to improper handling and lack of sanitization of user-editable messages that are directly rendered as HTML, allows an attacker to inject arbitrary HTML into the DOM...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to elevate their privileges to a system-level level.

The vulnerability of the Windows Installer component in Windows operating systems is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...

CVE-2025-22854

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions...

Google chrome 安全漏洞

Google Chrome is a popular web browser. Google Chrome suffers from an integer overflow vulnerability that stems from improper handling of integer values, which can be exploited by an attacker to submit a special WEB request that can be tricked into being parsed by the user, crashing the applicati...

KDE Konsole 安全漏洞

KDE Konsole is a customizable terminal emulator from KDE. A security vulnerability exists in KDE Konsole versions prior to 25.04.2 that stems from improper URL handling and could lead to remote code execution...

The vulnerability of the Craft CMS content management system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Craft CMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the django.utils.log.log_response() function in the Django web application framework allows a hacker to gain access and modify data in the log file.

The vulnerability of the django.utils.log.logresponse function in the Django web application framework is related to improper handling of log file output. Exploiting this vulnerability can allow an attacker to gain access and modify data in the log files...

Information Leakage

djangoselect2 is vulnerable to information leakage. The vulnerability is due to improper handling of instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget, allowing an attacker to access restricted query sets and sensitive data...

Improper Handling of Invalid Use of Special Elements

Overview org.apache.inlong:manager-common is an one-stop integration framework for massive data Affected versions of this package are vulnerable to Improper Handling of Invalid Use of Special Elements through the JDBC verification process. An attacker can manipulate MySQL queries by inserting...

CVE-2024-20316

A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...

CVE-2024-37284

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing th...