426 matches found
Astra Linux – Vulnerability in OpenSSH
Using SSH in OpenSSH before version 10.1 allows for the use of the '\0' character in an SSH URI. This could potentially lead to code execution when a ProxyCommand is used...
PT-2025-44671
Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2 Description The Summer Pearl Group Vacation Rental Management Platform is affected by inadequate server-side authorization. Authenticated attackers can access and...
CVE-2025-12080 Intent Abuse in Google Messages for Wear OS for Silent Message Sending
On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...
Linux Distros Unpatched Vulnerability : CVE-2021-3907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OctoRPKI does not escape a URI with a filename containing .., this allows a repository to create a file, ex...
EUVD-2004-2299
Malware in sbrugna...
EUVD-2020-27395
Malware in sbrugna...
EUVD-2012-6602
Malware in sbrugna...
URI Credential Leakage Bypass
A vulnerability in the URI library bundled with Ruby allows sensitive user credentials such as usernames or passwords in a URI to be unintentionally leaked when combining URIs using the + operator. This issue bypasses the previous fix for CVE-2025-27221. The issue affects Ruby's built-in URI...
EUVD-2025-32590
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
EUVD-2022-42492
Malicious code in bioql PyPI...
EUVD-2025-7510
Malicious code in bioql PyPI...
EUVD-2025-25855
Malicious code in bioql PyPI...
EUVD-2024-22158
Malicious code in bioql PyPI...
EUVD-2025-27247
Malicious code in bioql PyPI...
SUSE-SU-2025:03244-1 Security update for raptor
This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674...
CVE-2025-9161
A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution...
PT-2025-36730
Name of the Vulnerable Software and Affected Versions: FactoryTalk Optix affected versions not specified Description: A security issue exists in FactoryTalk Optix MQTT broker due to insufficient URI sanitization. This flaw allows the loading of remote Mosquito plugins, potentially leading to remo...
CVE-2025-0083
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Mercatus ERP 安全漏洞
Mercatus ERP is an enterprise resource planning system from Mercatus Inc. in the United States. A security vulnerability exists in Mercatus ERP version 2.00.019, which stems from an improperly controlled resource identifier in file /basico/webservice/imprimir-danfe/id...
CivetWeb 安全漏洞
CivetWeb is open source Civetweb an easy-to-use, powerful, C/C++ embeddable web server with optional CGI, SSL and Lua support. A security vulnerability exists in CivetWeb versions 1.14 through 1.16, which stems from a buffer overflow in the URI parser that could lead to remote code execution...