1516 matches found
CVE-2025-62713 Kottster app reinitialization can be re-triggered allowing command injection in development mode
Kottster is a self hosted Node.js admin panel. From versions 3.2.0 to before 3.3.2, Kottster contains a pre-authentication remote code execution RCE vulnerability when running in development mode. This affects development mode only, production deployments were never affected. This issue has been...
CVE-2025-62713
Kottster is a self-hosted Node.js admin panel. A pre-authentication remote code execution (RCE) vulnerability exists in development mode for versions 3.2.0–before 3.3.2; production deployments are unaffected. The issue allows code execution via development-mode behaviors, and has been fixed in ve...
EUVD-2025-35701
Kottster app reinitialization can be re-triggered allowing command injection in development mode...
PT-2025-43531
Name of the Vulnerable Software and Affected Versions Kottster versions 3.2.0 through 3.3.1 Description Kottster is a self-hosted Node.js admin panel. Versions 3.2.0 through 3.3.1 contain a pre-authentication remote code execution RCE vulnerability when running in development mode. Production...
SUSE CVE-2025-59043
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043 OpenBao vulnerable to denial of service via malicious JSON request processing
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043
OpenBao (open source identity-based secrets management system) is vulnerable in versions prior to 2.4.1 to a denial-of-service scenario. A crafted JSON payload can cause excessive memory usage during deserialization (factor up to ~35), potentially bypassing max_request_size and triggering an out-...
Vulnerabilities fixed in Redis
Redis has fixed vulnerabilities in versions 8.2.1 and below. The vulnerabilities are in Redis' Lua scripting engine, which can be exploited by authenticated users. This can lead to remote code execution, out-of-bounds data access or server crashes. The vulnerabilities could compromise the integri...
EUVD-2019-8871
Malware in sbrugna...
EUVD-2021-24222
Malware in sbrugna...
EUVD-2018-3048
Malware in sbrugna...
EUVD-2019-7618
Malware in sbrugna...
EUVD-2020-17122
Malware in sbrugna...
EUVD-2020-7902
Malware in sbrugna...
Exploit for Improper Access Control in Oracle Concurrent_Processing
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detect...
📄 FortiWeb Fabric Connector 7.6.x SQL Injection
FortiWeb Fabric Connector versions 7.6.x suffer from a pre-authentication remote SQL injection vulnerability. Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL Injection to Remote Code Execution Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact:...
EUVD-2025-26165
Malicious code in bioql PyPI...
EUVD-2025-23201
Malicious code in bioql PyPI...