7031 matches found
CVE-2025-42939: Incorrect Authorization
SAP S/4HANA Manage Processing Rules - For Bank Statements allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tampering the request parameter. Due to missing authorization check, the attacker can delete shared rule conditions that should...
Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: Add livepatch for CVE-2025-9230 bsc1250410. Use strong externalization for ssl3setupreadbuffer and ssl3releasereadbuffer Use strong externalization for osslstatemfatal. Add livepatch for CVE-2024-4741 bsc1225552. Drop trigger rule...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF when processing user-supplied URLs. An attacker can cause the server to send unauthorized requests to arbitrary internal or external services by submitting crafted URLs. Workaround This vulnerability can...
CVE-2025-59146
Summary: CVE-2025-59146 targets the “New API” SSRF in versions before 0.9.0.5. An authenticated user can submit a URL for the server to fetch, with improper validation allowing server-side requests to arbitrary internal or external destinations. The issue is fixed in 0.9.0.5, which adds a default...
CVE-2025-59146 New API has Authenticated Server-Side Request Forgery (SSRF) issue
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. An authenticated Server-Side Request Forgery SSRF vulnerability exists in versions prior to 0.9.0.5. A feature within the application allows authenticated users to submit a URL for the server to...
TOTOLINK X6000R Set WiFi Acl Rules Command Execution
The vulnerability of the setWiFiAclRules function in the TOTOLINK X6000R router software lies in the lack of measures taken to neutralize special elements during the processing of the desc parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
No Time to Waste: Embedding AI to Cut Noise and Reduce Risk
Artificial intelligence is reshaping cybersecurity on both sides of the battlefield. Cybercriminals are using AI-powered tools to accelerate and automate attacks at a scale defenders have never faced before. Security teams are overwhelmed by an explosion of vulnerability data, tool outputs, and...
Linux Distros Unpatched Vulnerability : CVE-2023-53492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not ignore genmask when looking up chain by id When adding a rule to...
Linux Distros Unpatched Vulnerability : CVE-2025-59148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 8.0.0 and below...
EUVD-2010-1062
Malware in sbrugna...
EUVD-2014-9546
Malware in sbrugna...
EUVD-2010-3809
Malware in sbrugna...
EUVD-1999-1349
Malware in sbrugna...
EUVD-2005-0965
Malware in sbrugna...
EUVD-2011-0842
Malware in sbrugna...
EUVD-2003-0076
Malware in sbrugna...
EUVD-2010-0539
Malware in sbrugna...
EUVD-2011-4363
Malware in sbrugna...