11310 matches found
Memos security vulnerabilities
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos version v0.25.2, which stems from improper access control of the Identity Provider service and could lead to account takeover or denial of service...
PT-2025-49581
Name of the Vulnerable Software and Affected Versions SettingsProvider.java affected versions not specified Description A flaw exists in the isValidMediaUri function within SettingsProvider.java that may allow cross-user media reading due to a missing permission check. This could result in local...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: runc, kube-fluentd-operator, thanos-operator, postgres-operator, opensearch-k8s-operator, policy-controller, rancher-helm, paranoia, terraform-provider-time, terraform-provider-sendgrid, portieris, terraform-provider-azuread, chisel, sftpgo-plugin-pubsub,...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: runc, kube-fluentd-operator, thanos-operator, postgres-operator, opensearch-k8s-operator, policy-controller, rancher-helm, paranoia, terraform-provider-time, terraform-provider-sendgrid, portieris, terraform-provider-azuread, chisel, sftpgo-plugin-pubsub,...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: deck-fips, gcp-compute-persistent-disk-csi-driver-fips, grpc-health-probe-fips, kube-rbac-proxy, logstash, rancher-loglevel, crossplane-provider-gitlab-fips, sqlexporter-fips, opencost, rook-fips, crossplane-function-environment-configs-fips, redis-operator-fips,...
CVE-2025-66558
Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long random string of letters, numbers and symbols. The victim would...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: grafana-mimir, crossplane-provider-keycloak, deck-fips, harbor, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, knative-client, grpc-health-probe-fips, kube-rbac-proxy, logstash, rancher-loglevel, crossplane-provider-gitlab-fips, hubble-ui,...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: grafana-mimir, crossplane-provider-keycloak, deck-fips, harbor, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, knative-client, grpc-health-probe-fips, kube-rbac-proxy, logstash, rancher-loglevel, crossplane-provider-gitlab-fips, hubble-ui,...
wp_exploitation_framework
🚀 WordPress PWN Framework v5.0 - AI-Powered Edition !Python...
CVE-2025-27935 Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit
The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...
CVE-2025-27935 Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit
The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: runc, sqlexporter, opensearch-k8s-operator, policy-controller, spicedb, op-geth, nri-nginx, falco-exporter, grafana-image-renderer, kubernetes-csi-external-provisioner, nri-apache, nodetaint, kbld, metrics-server, kapp-controller, gobuster,...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: runc, sqlexporter, opensearch-k8s-operator, policy-controller, spicedb, op-geth, nri-nginx, falco-exporter, grafana-image-renderer, kubernetes-csi-external-provisioner, nri-apache, nodetaint, kbld, metrics-server, kapp-controller, gobuster,...
CVE-2022-50335
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
Oracle Linux 9 : openssl (ELSA-2025-21255)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21255 advisory. 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream...
openssl security update
3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115929 1:3.5.1-...
CVE-2025-12419
Mattermost versions 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12, 11.0.x = 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of...
CVE-2025-65238
Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attackers with low-level privileges to dump user records and access sensitive information...
