4108 matches found
CVE-2025-25253
An Improper Validation of Certificate with Host Mismatch vulnerability CWE-297 in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow a...
PT-2025-41948
Name of the Vulnerable Software and Affected Versions FortiProxy versions 7.0 through 7.6.1 FortiOS versions 7.0 through 7.6.2 Description An improper validation of certificate with host mismatch exists in ZTNA proxy, potentially allowing an unauthenticated attacker in a man-in-the-middle positio...
EUVD-2025-33766
Astro's X-Forwarded-Host is reflected without validation...
CVE-2025-61925
CVE-2025-61925 affects Astro (on-demand rendering) where headers x-forwarded-proto and x-forwarded-port are used unsafely to build URLs, enabling URL manipulation that can bypass middleware protections and potentially cause SSRF, cache-poisoning, or URL-based attacks. The issue is discussed acros...
JLSEC-2025-31 An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature...
An authentication bypass vulnerability exists in libcurl 8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain...
JLSEC-2025-20 An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before...
An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus to crash when receiving a message where an array length is inconsistent with the size of the element type...
RLSA-2025:15608 Important: python3.12-cryptography security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
Linux Distros Unpatched Vulnerability : CVE-2022-50486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated...
Linux Distros Unpatched Vulnerability : CVE-2023-53491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - startkernel: Add nostackprotector function attribute Back during the discussion of commit a9a3ed1eff36 x86: Fix early boot crash on gcc-10, third try we discuss...
CVE-2025-8291 ZIP64 End of Central Directory (EOCD) Locator record offset not checked
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create Z...
CLSA-2025-1759856673 Fix CVE(s): CVE-2025-55154
SECURITY UPDATE: memory corruption vulnerability from unsafe magnified size calculations in ReadOneMNGIMage - debian/patches/CVE-2025-55154.patch: Fix type mismatch issue in png.c causing incorrect image dimensions calculation - CVE-2025-55154...
CVE-2023-53621
In the Linux kernel, the following vulnerability has been resolved: memcontrol: ensure memcg acquired by id is properly set up In the eviction recency check, we attempt to retrieve the memcg to which the folio belonged when it was evicted, by the memcg id stored in the shadow entry. However, ther...
EUVD-2020-0351
Malware in sbrugna...
EUVD-2021-12241
Malware in sbrugna...
EUVD-2020-17902
Malware in sbrugna...
EUVD-2020-0424
Malware in sbrugna...
EUVD-2010-4185
Malware in sbrugna...
EUVD-2021-23729
Malware in sbrugna...