12504 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-38291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we...
Machine Learning-Based AES Key Recovery Via Side-Channel Analysis on the ASCAD Dataset
Cryptographic algorithms like AES and RSA are widely used and they are mathematically robust and almost unbreakable but its implementation on physical devices often leak information through side channels, such as electromagnetic EM emissions, potentially compromising said theoretically secure...
IBM Engineering Requirements Management DOORS Web Interface MITM
The vulnerability of the IBM Engineering Requirements Management DOORS application interface relates to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” attack...
Malicious code in key-recovery-service-v2 (npm)
The package key-recovery-service-v2 was found to contain malicious code...
MAL-2025-24423 Malicious code in key-recovery-service-v2 (npm)
The package key-recovery-service-v2 was found to contain malicious code...
PostgreSQL security vulnerabilities
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL versions 17.6, 16.10,...
Dell OpenManage Enterprise log information leakage vulnerability
DELL OpenManage Enterprise is an enterprise-class systems management console from Dell designed to simplify IT infrastructure management and support centralized lifecycle management of PowerEdge servers, storage, network devices and third-party components. An information disclosure vulnerability...
PostgreSQL security vulnerabilities
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL versions 17.6, 16.10,...
PT-2025-33285 · 5094-If8 · 5094-If8
Name of the Vulnerable Software and Affected Versions: 5094-IF8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
Brave Android 1.81.135 Security Fixes
Set clipboard sensitivity flag when copying Brave Wallet recovery code as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.127 — refer to Google Chrome advisories for inherited CVEs...
Brave Desktop 1.81.135 Security Fixes
Set clipboard sensitivity flag when copying Brave Wallet recovery code as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.127 — refer to Google Chrome advisories for inherited CVEs...
Plane security vulnerabilities
Plane is an open source, self-hosted project planning tool from Plane Open Source. A security vulnerability exists in Plane version 0.23.1, which stems from a server-side request forgery in the password recovery feature...
Dell SupportAssist OS Recovery Privilege Elevation Vulnerability
Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery Temporary File...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
PT-2025-33008 · Makeplane · Makeplane
Name of the Vulnerable Software and Affected Versions: makeplane plane version 0.23.1 Description: The software contains a server side request forgery SSRF vulnerability in the password recovery functionality. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
IBM Cloud Pak System Arbitrary HTML Execution
The vulnerability of the software for cloud backup and data recovery solutions from IBM Cloud Pak System relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code remotely...
CVE-2025-50251
The makeplane plane open-source project planning tool is affected by a Server-Side Request Forgery (SSRF) vulnerability in version 0.23.1 . The flaw exists within the password recovery functionality, allowing an attacker to potentially force the server to make unintended requests. The vulnerabili...
