Fortinet FortiWeb 信任管理问题漏洞

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Security Advisory 0126

Security Advisory 0126 . CSAF PDF Date: November 18, 2025 Revision | Date | Changes ---|---|--- 1.0 | November 18, 2025 | Initial release The following issues were discovered during regular penetration testing of Arista’s EOS. Issues detailed cover CloudVision Exchange CVX based features includin...

Alibaba Cloud Linux 3 : 0165: redis:6 (ALINUX3-SA-2025:0165)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0165 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-46817: Redis is an open source,...

November “In the Trend of VM” (#21): vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux

November "In the Trend of VM" 21: vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux. The usual monthly roundup. After several months, here's a big one. Post on Habr rus Post on SecurityLab rus Digest on the PT website rus A total of nine vulnerabilities: RCE -...

CLSA-2025-1762785221 Update of redis

update tarball to 6.2.21 - CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by authenticated users - CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory access or server crash...

EUVD-2025-175496

Malicious code in xenos-nconf-aurora-redis npm...

EUVD-2025-180109

Malicious code in bellatrix-proteomics-meissa-redis npm...

EUVD-2025-176018

Malicious code in telesto-redis-ophiuchus-radioastronomy npm...

EUVD-2025-175442

Malicious code in yildun-mesosphere-redis-spectron npm...

EUVD-2025-176769

Malicious code in redis-astrophysics-astrophysics-webpack npm...

EUVD-2025-179808

Malicious code in ceres-redis-umbra-terser-webpack-plugin npm...

Malicious code in publish-xanthus-cypress-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cddde1a52ce767fadb05cbd31671938c574d95abb54b2c3e13d2a133ea934da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180038

Malicious code in blackhole-prettier-plugin-markdown-achernar-redis npm...

EUVD-2025-180112

Malicious code in bellatrix-odin-redis-commitlint npm...

EUVD-2025-176969

Malicious code in proxima-antimatter-express-redis npm...

MAL-2025-190380 Malicious code in xenos-nconf-aurora-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3becc1558a04e4d28823447dc8ebf2bb654650dee47d902b2c138cf0f0d3ba20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-eclipse-redis-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b52923e7c20691849abf236ed8ede5df6d7c8cd481e3c7e17dca303bc74dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176770

Malicious code in redis-adonis-quito-io npm...

EUVD-2025-176767

Malicious code in redis-corvus-transform-dependencies npm...

Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...