2292 matches found
SUSE CVE-2025-59043
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043 OpenBao vulnerable to denial of service via malicious JSON request processing
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043
OpenBao (open source identity-based secrets management system) is vulnerable in versions prior to 2.4.1 to a denial-of-service scenario. A crafted JSON payload can cause excessive memory usage during deserialization (factor up to ~35), potentially bypassing max_request_size and triggering an out-...
The Silent Threat in Active Directory: How AS-REP Roasting Steals Passwords Without a Trace and Trellix NDR’s Rapid Detection
The Silent Threat in Active Directory: How AS-REP Roasting Steals Passwords Without a Trace and Trellix NDR’s Rapid Detection By Maulik Maheta · October 15, 2025 Executive summary Adversaries use AS-REP Roasting to extract and crack password hashes from Active Directory AD accounts with Kerberos...
Vulnerabilities fixed in Redis
Redis has fixed vulnerabilities in versions 8.2.1 and below. The vulnerabilities are in Redis' Lua scripting engine, which can be exploited by authenticated users. This can lead to remote code execution, out-of-bounds data access or server crashes. The vulnerabilities could compromise the integri...
EUVD-2019-8871
Malware in sbrugna...
EUVD-2018-3048
Malware in sbrugna...
EUVD-2021-24222
Malware in sbrugna...
EUVD-2019-7618
Malware in sbrugna...
EUVD-2020-17122
Malware in sbrugna...
EUVD-2020-7902
Malware in sbrugna...
Exploit for Improper Access Control in Oracle Concurrent_Processing
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detect...
📄 FortiWeb Fabric Connector 7.6.x SQL Injection
FortiWeb Fabric Connector versions 7.6.x suffer from a pre-authentication remote SQL injection vulnerability. Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL Injection to Remote Code Execution Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact:...
EUVD-2025-25352
Malicious code in bioql PyPI...
EUVD-2025-26165
Malicious code in bioql PyPI...
EUVD-2025-23201
Malicious code in bioql PyPI...
EUVD-2022-47204
Malicious code in bioql PyPI...
EUVD-2024-42523
Malicious code in bioql PyPI...