CVE-2025-25298 Missing Maximum Password Length Validation in Strapi Password Hashing

Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password length when using bcryptjs for password hashing. Bcryptjs ignores any bytes beyond 72, so passwords longer than 72 bytes are silently truncated. A user can create an account...

Your passwords don’t need so many fiddly characters, NIST says

It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it. After nearly four years of work to update and modernize its guidance for how companies, organizations, and businesses should protect their systems and their...

EUVD-2010-3713

Malware in sbrugna...

EUVD-2012-1816

Malware in sbrugna...

EUVD-2021-12789

Malware in sbrugna...

EUVD-2020-29480

Malware in sbrugna...

EUVD-2015-9382

Malware in sbrugna...

EUVD-2013-3548

Malware in sbrugna...

EUVD-2016-3101

Malware in sbrugna...

EUVD-2022-4013

Malicious code in bioql PyPI...

EUVD-2025-6744

Malicious code in bioql PyPI...

EUVD-2022-7012

Malicious code in bioql PyPI...

EUVD-2022-53078

Malicious code in bioql PyPI...

EUVD-2023-1943

Malicious code in bioql PyPI...

EUVD-2022-45073

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : cloud-init Multiple Vulnerabilities (NS-SA-2025-0230)

The remote NewStart CGSL host, running version MAIN 6.06, has cloud-init packages installed that are affected by multiple vulnerabilities: - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included sshdeletekeys: 0, disabling cloud-init's deletion of ssh host keys. In some...

Linux Distros Unpatched Vulnerability : CVE-2016-20013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service CPU consumption because the algorithm's runtime is proportional to the squa...

Linux Distros Unpatched Vulnerability : CVE-2020-8632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In cloud-init through 19.4, randuserpassword in cloudinit/config/ccsetpasswords.py has a small default pwlen value, which makes it easier for attackers to guess...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the failure of the function fromAdvSetWan parameter PPPOEPassword to correctly validate the length of the input data in file...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

An update for OpenShift Jenkins is now available for Red Hat Product OCP Tools 4.14. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...