120 matches found
EUVD-2022-3130
Malicious code in bioql PyPI...
EUVD-2022-7562
Malicious code in bioql PyPI...
EUVD-2025-7026
Malicious code in bioql PyPI...
EUVD-2025-28245
Malicious code in bioql PyPI...
EUVD-2025-12105
Malicious code in bioql PyPI...
EUVD-2025-7024
Malicious code in bioql PyPI...
EUVD-2023-34872
Malicious code in bioql PyPI...
EUVD-2025-7046
Malicious code in bioql PyPI...
Exploit for CVE-2025-9784
CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test Overv...
📄 nopCommerce 4.10 / 4.80.3 Resource Exhaustion
nopCommerce versions 4.10 and 4.80.3 are vulnerable to resource exhaustion vulnerabilities. nopCommerce is vulnerable to Insufficient Resource Allocation Limits when handling large Excel file imports. Although the application provides a warning message recommending that users avoid importing more...
CVE-2024-37309
CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint port 4200 permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameter...
StrangeBee TheHive 安全漏洞
StrangeBee TheHive is an application from StrangeBee, Inc. A security vulnerability exists in StrangeBee TheHive versions prior to 5.5.1, which stems from an unrestricted password reset feature that could lead to mailbox storage exhaustion or SMTP server overload...
CVE-2025-48738
The CVE-2025-48738 entry concerns StrangeBee TheHive and is supported by multiple sources in Connected documents. Affected: TheHive versions 5.2.0–5.2.15, 5.3.0–5.3.10, 5.4.0–5.4.9, and 5.5.0. Root cause: an unrestricted password-reset feature allows unauthenticated remote attackers to trigger re...
PT-2025-22821 · Strangebee · Thehive
Name of the Vulnerable Software and Affected Versions: StrangeBee TheHive versions 5.2.0 through 5.2.15 StrangeBee TheHive versions 5.3.0 through 5.3.10 StrangeBee TheHive versions 5.4.0 through 5.4.9 StrangeBee TheHive versions 5.5.0 Description: An e-mail flooding issue allows unauthenticated...
CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...
Denial Of Service (DoS)
github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability is due to missing validation of uniqueness and quantity of task actions in the UpdateRunTaskActions GraphQL operation, allowing attackers to overload the server by submitting excessive actions...
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions
Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific post...
CVE-2025-35965
Mattermost suffers a Denial-of-Service due to improper validation of task actions in UpdateRunTaskActions (Mattermost GraphQL). Affects Mattermost versions 10.4.x <=10.4.2, 10.5.x <=10.5.0, 9.11.x
CVE-2025-35965 DoS in Mattermost Playbooks via Excessive Task Actions
Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific post...