EUVD-2021-1861

Malware in sbrugna...

EUVD-2011-5254

Malware in sbrugna...

EUVD-2019-2035

Malware in sbrugna...

EUVD-2021-19537

Malware in sbrugna...

EUVD-2011-5250

Malware in sbrugna...

EUVD-2021-1616

Malware in sbrugna...

EUVD-2021-16092

Malware in sbrugna...

EUVD-2020-21244

Malware in sbrugna...

EUVD-2021-19707

Malware in sbrugna...

EUVD-2004-0434

Malware in sbrugna...

EUVD-2019-3736

Malware in sbrugna...

EUVD-2016-9553

Malware in sbrugna...

EUVD-2018-19501

Malware in sbrugna...

EUVD-2018-1987

Malware in sbrugna...

EUVD-2006-1648

Malware in sbrugna...

EUVD-2025-32895

Nagios Log Server before 2024R1.3.2 allows authenticated users with read-only API access to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response...

vLLM 安全漏洞

vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A security vulnerability exists in versions prior to vLLM 0.11.0rc2, which stems from a timing attack vulnerability in the API key authentication method that could lead to authentication bypass...

uscc-binary-exploits

Binary Exploitation Framework A comprehensive collection of t...

CVE-2025-58578 Unlimited user creation by authorized users

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

CVE-2025-58578

The CVE-2025-58578 describes an API misuse where an authorized user can create an unlimited number of user accounts via a POST endpoint due to no quotas or validation. Public documents across Red Hat, NVD, CVE lists, and SICK-related advisories confirm the core issue (unbounded account creation) ...