24157 matches found
CVE-2025-44823
Nagios Log Server (before 2024R1.3.2) is vulnerable: unauthenticated? No—authenticated users with access to the API can call /nagioslogserver/index.php/api/system/get_users to retrieve cleartext admin API keys. The underlying issue exposes user accounts and API keys, enabling full system compromi...
kernel: security/keys: fix slab-out-of-bounds in key_task_permission
In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in kuidval include/linux/uidgid.h:36 BUG: KASAN: slab-out-of-bounds in uideq include/linux/uidgid.h:63...
How to set up two-factor authentication (2FA) on your Facebook account
While two-factor authentication 2FA is not completely fool-proof, it is one of the best ways to protect your accounts from hackers. It adds an extra step when logging in, which is a small extra effort for you, but it dramatically boosts your security. With 2FA, you’ll be asked for a special login...
CVE-2025-58591
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...
CVE-2025-58591
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...
CVE-2025-58591
CVE-2025-58591 describes a path traversal vulnerability affecting SICK Enterprise Analytics and SICK Logistic Analytics products, allowing a remote attacker to brute-force folders and files to read sensitive data (e.g., private keys/configs). Connected sources indicate affected SICK software, but...
CVE-2025-58591 Path Traversal
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...
CVE-2025-58591 Path Traversal
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...
EUVD-2025-32504
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...
PT-2025-40870
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A remote, unauthorized attacker can brute force folders and files and read them, potentially exposing sensitive information such as private keys or configurations. This allows for the gathering of...
RHEL 9 : kernel (RHSA-2025:17377)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17377 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: security/keys: fix...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that originates from a remote, unauthorized attacker being able to brute-force decrypt folders and files and read...
CVE-2023-53536 blk-crypto: make blk_crypto_evict_key() more robust
In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still in-use due to a bug or that -keyslotevict failed, it currently just returns while leaving the key linked into the keyslot management...
Flowise Stored XSS vulnerability through logs in chatbot
Description In the chat log, tags like input and form are allowed. This makes a potential vulnerability where an attacker could inject malicious HTML into the log via prompts. When an admin views the log containing the malicious HTML, the attacker could steal the admin's credentials or sensitive...
EUVD-2023-36793
Malicious code in bioql PyPI...
EUVD-2021-2939
Malicious code in bioql PyPI...
EUVD-2022-29916
Malicious code in bioql PyPI...
EUVD-2023-33048
Malicious code in bioql PyPI...