Lucene search
+L

5476 matches found

Packet Storm News
Packet Storm News
added 2025/06/22 12:00 a.m.11 views

Fuzzy Location and Allocation Hub Network Design for Air Cargo Transportation Considering Sustainability and Time Window

Hub location Problems seek to find hub facilities and assign non-hub nodes to them in such a way that the flow between origin and destination should be effectively established according to the desired goal. In general, in the literature of location, it is assumed that the time horizon of hub...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/21 12:00 a.m.13 views

Linear and Numerical SDoF Bounds of Active RIS-Assisted MIMO Wiretap Interference Channel

The multiple-input multiple-output MIMO wiretap interference channel IC serves as a canonical model for information-theoretic security, where a multiple-antenna eavesdropper attempts to intercept communications in a two-user MIMO IC system. The secure degrees-of-freedom SDoF of an active...

6.9AI score
SaveExploits0
Redos
Redos
added 2025/06/19 12:00 a.m.14 views

ROS-20250619-02

A vulnerability in the Net::IMAP module of the Ruby programming language is related to uncontrolled memory allocation. memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

6.5CVSS7AI score0.0047EPSS
SaveExploits0
Redos
Redos
added 2025/06/19 12:00 a.m.22 views

ROS-20250619-04

Vulnerability of http2 package of Go programming language is related to uncontrolled server resources consumption as a result of resetting Server.MaxConcurrentStreams parameter during request stream processing. as a result of resetting the Server.MaxConcurrentStreams parameter when processing a...

7.5CVSS7.9AI score0.99999EPSS
SaveExploits21
Redos
Redos
added 2025/06/19 12:00 a.m.15 views

ROS-20250619-01

A vulnerability in the Rack module interface of the Ruby programming language interpreter is related to sending requests with an extremely large number of parameters. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the Rack...

7.5CVSS7.4AI score0.01157EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/06/17 3:01 p.m.28 views

CVE-2025-28991 WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme Evon snsevon allows PHP Local File Inclusion.This issue affects Evon: from n/a through = 3.4...

8.1CVSS0.00719EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/06/17 10:43 a.m.45 views

Moderate: Red Hat Security Advisory: go-toolset:rhel8 security update

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

9.1CVSS6.8AI score0.00811EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/16 12:02 a.m.12 views

OSV-2025-467 Security exception in java.base/java.lang.StringUTF16.newBytesFor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424839378 Crash type: Security exception Crash state: java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.AbstractStringBuilder.inflate java.base/java.lang.AbstractStringBuilder.append...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.10 views

TencentOS Server 3: rust-toolset:rhel8 (TSSA-2022:0116)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0116 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.3CVSS7.3AI score0.12881EPSS
SaveExploits5References3
Redos
Redos
added 2025/06/16 12:00 a.m.13 views

ROS-20250616-03

A vulnerability in the Rack module interface of the Ruby programming language interpreter is related to insufficient insufficient validation of data provided by an attacker in Rack::CommonLogger. Exploitation of the vulnerability could Allow an attacker acting remotely to manipulate data log entr...

7.1CVSS6.9AI score0.01185EPSS
SaveExploits1
OSV
OSV
added 2025/06/15 6:01 p.m.10 views

CVE-2025-5990 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller

An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input...

7.6CVSS5.7AI score
SaveExploits0References3
Fedora
Fedora
added 2025/06/14 1:51 a.m.16 views

[SECURITY] Fedora 41 Update: python3.12-3.12.11-1.fc41

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2025/06/14 1:51 a.m.14 views

[SECURITY] Fedora 41 Update: python3.11-3.11.13-1.fc41

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2025/06/14 1:10 a.m.12 views

[SECURITY] Fedora 42 Update: python3.11-3.11.13-1.fc42

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

7.4AI score
SaveExploits0
OSV
OSV
added 2025/06/13 8:40 p.m.15 views

GHSA-9875-CW22-F7CX XWiki allows remote code execution through default value of wiki macro wiki-type parameters

Impact Any user with edit right on a page could be the user's profile can execute code Groovy, Python, Velocity with programming right by defining a wiki macro. This allows full access to the whole XWiki installation and thus impacts its confidentiality, integrity and availability. The main probl...

8.7CVSS6AI score0.0059EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/13 6:15 p.m.27 views

CVE-2025-49586

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application the default for all users XWiki can obtain programming right/perform remote code execution by editing the application. This vulnerability has been fixed in XWiki 17.0.0,...

8.8CVSS0.00749EPSS
SaveExploits1References3
NVD
NVD
added 2025/06/13 4:15 p.m.23 views

CVE-2025-49581

XWiki is a generic wiki platform. Any user with edit right on a page could be the user's profile can execute code Groovy, Python, Velocity with programming right by defining a wiki macro. This allows full access to the whole XWiki installation. The main problem is that if a wiki macro parameter...

8.8CVSS0.0059EPSS
SaveExploits1References3
CVE
CVE
added 2025/06/13 4:09 p.m.135 views

CVE-2025-49581

CVE-2025-49581 (XWiki) : A user with edit rights can cause remote code execution by defining a wiki macro whose parameter accepts wiki syntax, and whose default value is executed with the rights of the document author (the macro caller). By overriding a macro such as the children macro on a page ...

8.8CVSS7.5AI score0.0059EPSS
SaveExploits1References3Affected Software1
Fedora
Fedora
added 2025/06/13 1:03 a.m.28 views

[SECURITY] Fedora 42 Update: python3.10-3.10.18-1.fc42

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:00 a.m.13 views

The vulnerability of the Cisco Unified Intelligence Center reporting software and the Unified Contact Center Enterprise contact center management software lies in the implementation of security functions at the client side, which allows attackers to elevate their privileges to the root level.

The vulnerability of the Cisco Unified Intelligence Center reporting software and the Unified Contact Center Enterprise contact center management software relates to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to elevate their...

7.5CVSS5.5AI score0.00405EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder