CVE-2025-9364

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data...

CVE-2025-9364

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data...

CVE-2025-9364

CVE-2025-9364 describes an open Redis database issue in Rockwell Automation’s FactoryTalk Analytics LogixAI, caused by an overly permissive Redis instance. The vulnerability could allow an attacker on the intranet to access and potentially alter sensitive data. The entry lists high impact (CVSS v...

CVE-2025-9364 Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data...

CVE-2025-9364 Rockwell Automation FactoryTalk® Analytics™ LogixAI® Exposed Redis DB

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and potential alteration of data...

PT-2025-36731

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An open database issue exists due to an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and...

Rockwell Automation FactoryTalk Analytics LogixAI 安全漏洞

Rockwell Automation FactoryTalk Analytics LogixAI is an embedded AI analytics module from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk Analytics LogixAI that stems from excessive privileges on a Redis instance, which could lead to data leakage or tamperi...

openSUSE Security Advisory (SUSE-SU-2025:03073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2015-4335

This is a PoC exploit for CVE-2015-4335, a Redis Lua sandbox escape and arbitrary code execution vulnerability. The tool, named redischeck, checks a Redis instance for security vulnerabilities. It performs three checks: 1 if the AUTH command is set, 2 if the CONFIG command has been renamed, and 3...

Malicious code in draco-redis-bunyan-deimos (npm)

The package draco-redis-bunyan-deimos was found to contain malicious code...

MAL-2025-43431 Malicious code in algol-koa-xenos-redis (npm)

The package algol-koa-xenos-redis was found to contain malicious code...

MAL-2025-44068 Malicious code in draco-redis-bunyan-deimos (npm)

The package draco-redis-bunyan-deimos was found to contain malicious code...

Malicious code in auth0-chalk-redis-command (npm)

The package auth0-chalk-redis-command was found to contain malicious code...

MAL-2025-43545 Malicious code in auth0-chalk-redis-command (npm)

The package auth0-chalk-redis-command was found to contain malicious code...

ROS-20250905-06

A vulnerability in the Redis database management system DBMS server is related to unrestricted allocation of resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service through repeated unauthenticated connections...

SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2025:03073-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03073-1 advisory. - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution...

ROS-20250905-05

A vulnerability in the Redis database management system DBMS server is related to unrestricted allocation of resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service through repeated unauthenticated connections...

SUSE-SU-2025:03073-1 Security update for redis

This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation an...

ROS-20250904-11

A vulnerability in the Redis database management system DBMS server is related to an integer overflow in the buffer when executing commands that use the HyperLogLog algorithm. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted HLL...

ROS-20250904-12

Redis database management system DBMS vulnerability is related to uncontrolled memory allocation memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service A vulnerability in the Redis database management system DBMS server is related ...