EUVD-2022-1238

Malicious code in bioql PyPI...

EUVD-2024-2148

Malicious code in bioql PyPI...

PT-2025-36355

Name of the Vulnerable Software and Affected Versions Coder versions 2.22.0 through 2.24.3 Coder versions 2.25.0 and 2.25.1 Description Coder allows organizations to provision remote development environments via Terraform. In affected versions, Coder can be compromised through insecure session...

GO-2025-3812 File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser

File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

CVE-2010-3373

paxtest handles temporary files insecurely...

WordPress plugin Motors 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-6851 Arbitrary File Deletion in aimhubio/aim

In version 3.22.0 of aimhubio/aim, the LocalFileManager.cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted...

PT-2024-9465 · Microsoft · Windows Domain Name Service +1

Name of the Vulnerable Software and Affected Versions: Windows Domain Name Service versions affected versions not specified Description: The issue is related to a remote code execution problem in the Windows Domain Name Service. It involves the use of insecure mechanisms for handling authenticati...

Rclone 安全漏洞

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

Adobe After Effects < 18.4.2 Multiple Vulnerabilities (APSB21-79) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-79 advisory. - Adobe After Effects version 18.4.1 and earlier is affected by a memory corruption vulnerability due to insecu...

Adobe InCopy 16.0 < 16.4.0 Multiple Vulnerabilities (APSB21-71)

The version of Adobe InCopy installed on the remote host is prior to 16.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-71 advisory. - Adobe InCopy version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a...

CVE-2023-32189

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...

CVE-2023-32189

CVE-2023-32189 affects SUSE Manager (bootstrapping new clients) through insecure handling of SSH keys, enabling local attackers to access the keys. The issue is tied to SUSE Manager Server deployments; exploitation details are not described in the provided docs. Remediation is indicated by the SU...

SUSE Manager 安全漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration, and monitoring. A security vulnerability exists in SUSE Manager that stems from insecure handling of ssh keys used to boot clients, allowing a local attacke...

PT-2024-6249 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow a remote attacker t...

CVE-2024-3798

Insecure handling of GET header parameter file included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malicious requests to multiple hosts on the local network. If such a request reache...

CVE-2024-3799 Shell command injection in Phoniebox

Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malicious requests to multiple hosts on the local network. If such a request reach...

CVE-2024-3799 Shell command injection in Phoniebox

Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project Phoniebox allows an attacker to create a website, which – when visited by a user – will send malicious requests to multiple hosts on the local network. If such a request reach...