23751 matches found
CVE-2025-54981 Apache StreamPark: Weak Encryption Algorithm in StreamPark
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...
CVE-2025-54981
CVE-2025-54981 affects Apache StreamPark prior to 2.1.7, due to use of AES in ECB mode and a weak RNG for encrypting sensitive data such as JWT tokens. This weak encryption could lead to exposure of confidential data. The vulnerability is documented across multiple sources (NVD, Red Hat, OSV, CNV...
CVE-2025-54981 Apache StreamPark: Weak Encryption Algorithm in StreamPark
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...
CLSA-2025-1765545936 haproxy: Fix of CVE-2025-11230
CVE-2025-11230: fix possible DoS in mjson library when parsing numbers...
CVE-2025-14062
creationtimestamp| type| source ---|---|--- 2025-12-12 08:18:51+00:00| seen| https://gist.github.com/Darkcrai86/bb923460dd68262d1f513d792af10581...
WordPress plugin Upcoming for Calendly 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site request...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-28048)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-28048 advisory. - netfilter: nftables: reject duplicate device on updates Pablo Neira Ayuso Orabug: 38744086 CVE-2025-38678 - PCI: rcar: Demote WARN to...
PT-2025-50964
Name of the Vulnerable Software and Affected Versions Advanced Library Management System version 1.0 Description A flaw exists in Advanced Library Management System version 1.0 where manipulation of the roll number argument in the /borrow book.php file can lead to SQL injection. This issue can be...
EUVD-2025-202893
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the actiondiagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua...
EUVD-2025-202888
OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH3.01B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleupdate in file /usr/local/lua/devconfig/acesw.lua...
CVE-2025-14528
creationtimestamp| type| source ---|---|--- 2025-12-11 17:39:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702155519719586 2026-02-10 13:39:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-14528.yaml 2026-02-24...
CVE-2025-67686
creationtimestamp| type| source ---|---|--- 2025-12-11 07:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ozj77dzd2m...
CVE-2025-67646
creationtimestamp| type| source ---|---|--- 2025-12-11 03:33:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7onazrqon2e...
📄 Cisco ISE API 3.1 Command Injection
Proof of concept exploit for a command injection vulnerability in Cisco ISE API version 3.1. ============================================================================================================================================= | Title : Cisco ISE API 3.1 command injection Exploits | |...
org.jenkins-ci.main:jenkins-war (1.645), org.jenkins-ci.main:test (1.645) +5 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.645)
org.jenkins-ci.main:jenkins-core MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...
org.jenkins-ci.main:jenkins-war (1.645), org.jenkins-ci.main:test (1.645) +5 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.645)
org.jenkins-ci.main:jenkins-core MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...
CVE-2025-64447
A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute...
EUVD-2025-202385
Not used...
