766 matches found
CVE-2025-29791
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
Lucee 安全漏洞
Lucee is a high-performance open source CFML server written in Java by Lucee Open Source. A security vulnerability exists in Lucee versions prior to 6.1.1.118 that stems from a protection mechanism failure that could lead to code execution and access to protected resources...
CVE-2025-32013 Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery SSRF vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request ...
GPT Academic crazy_utils.get_files_from_everything function server-side request forgery vulnerability
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A server-side request forgery vulnerability exists in the GPT Academic crazyutils.getfilesfromeverything function, which can be exploited by an attacker to cause unauthorized access to...
Server Side Request Forgery (SSRF)
composiocore is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient input validation in the /api/actions/execute/WEBTOOLSCRAPEWEBSITECONTENT endpoint, which allows an attacker to manipulate server-side requests and access internal resources...
CVE-2024-12766 SSRF in parisneo/lollms-webui
parisneo/lollms-webui version V13 feather suffers from a Server-Side Request Forgery SSRF vulnerability in the POST /api/proxy REST API. Attackers can exploit this vulnerability to abuse the victim server's credentials to access unauthorized web resources by specifying the JSON parameter...
GPT Academic 安全漏洞
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A server-side request forgery vulnerability exists in the GPT Academic crazyutils.getfilesfromeverything function, which can be exploited by an attacker to cause unauthorized access to...
Ubuntu 24.04 LTS / 24.10 : Valkey vulnerabilities (USN-7359-1)
The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7359-1 advisory. It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code...
USN-7359-1: Valkey vulnerabilities
It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code. CVE-2024-46981 It was discovered that Valkey did not properly handle resource access permissions. An authenticated attacker could possibly use this issue to...
Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2025-1309)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the HMC controller on NVIDIA’s Hopper HGX computing platform allows a intruder to gain unauthorized access to the HMC controller.
The vulnerability of the HMC controller on NVIDIA’s Hopper HGX computing platform is related to deficiencies in the mechanism for assigning internal resource access levels for debugging purposes. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to the H...
CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...
Linux Distros Unpatched Vulnerability : CVE-2024-56640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after- free issue We encountered a LGR/link use-after-free...
CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...
CVE-2025-0289 CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...
CVE-2025-0289
CVE-2025-0289 affects Paragon Software BioNTdrv.sys in the Hard Disk Manager product line. The driver does not validate the MappedSystemVa pointer before passing it to HalReturnToFirmware, enabling a local attacker to compromise the service and escalate privileges (potential SYSTEM-level access)....
CVE-2025-0289 CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...
CVE-2024-24778 Apache StreamPipes: Resources Permission Escalation
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. This issue affects Apache StreamPipes: through 0.95.1. Users are recommended to upgrade to version 0.97.0 which fixes the issue...
CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service. Recent assessments: Assessed...
CVE-2024-24825
DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...