637 matches found
GHSA-X6FH-7QMF-69XH Slack Nebula may accept arbitrary source IP addresses
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
Unprotected Alternate Channel
Overview github.com/slackhq/nebula is a scalable overlay networking tool with a focus on performance, simplicity and security. Affected versions of this package are vulnerable to Unprotected Alternate Channel via improper handling of CIDR configuration in certificates. An attacker with control ov...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
EUVD-2025-35657
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
CVE-2025-62820
Slack Nebula prior to 1.9.7 is affected by a CIDR handling issue that allows accepting arbitrary source IPs within the Nebula network. The CVE entry documents this as a network‑level vulnerability with a CVSS v3.1 base score of 4.9 (Medium) and a high attack complexity, requiring low privileges a...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
Slack Nebula 安全漏洞
Slack Nebula is a scalable overlay network tool from Slack open source. A security vulnerability exists in Slack Nebula versions prior to 1.9.7 that stems from improper CIDR handling in certain configurations, which could lead to the acceptance of arbitrary source IP addresses in the Nebula netwo...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
EUVD-2018-11647
Malware in sbrugna...
EUVD-2025-29716
Malicious code in bioql PyPI...
EUVD-2023-48068
Malicious code in bioql PyPI...
EUVD-2023-48073
Malicious code in bioql PyPI...
EUVD-2023-48064
Malicious code in bioql PyPI...
EUVD-2023-48075
Malicious code in bioql PyPI...
CVE-2025-8463 IDOR in SecHard Information Technologies' SecHard
Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805...
PT-2025-38148
Name of the Vulnerable Software and Affected Versions Nebula Informatics SecHard versions prior to 3.6.2-20250805 Description An authorization bypass issue exists in Nebula Informatics SecHard due to a parameter injection vulnerability. This issue allows an attacker with low privileges to bypass...
Nebula Informatics SecHard 安全漏洞
Nebula Informatics SecHard is a multi-module software for implementing a zero-trust architecture from Nebula Informatics. A security vulnerability exists in versions prior to Nebula Informatics SecHard 3.6.2-20250805, which stems from a user-controllable key bypassing authorization and could lead...
