164 matches found
CVE-2025-58747 Dify MCP OAuth Flow Vulnerable to XSS
Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...
GHSA-47M2-4CR7-MHCW quic-go: Panic occurs when queuing undecryptable packets after handshake completion
Summary A misbehaving or malicious server can trigger an assertion in a quic-go client and crash the process by sending a premature HANDSHAKEDONE frame during the handshake. Impact A misbehaving or malicious server can cause a denial-of-service DoS attack on the quic-go client by triggering an...
EUVD-2005-1203
Malware in sbrugna...
EUVD-2020-8061
Malware in sbrugna...
EUVD-2007-4607
Malware in sbrugna...
EUVD-2016-1375
Malware in sbrugna...
EUVD-2016-10729
Malware in sbrugna...
EUVD-2007-1558
Malware in sbrugna...
EUVD-2019-2666
Malware in sbrugna...
EUVD-2017-12325
Malware in sbrugna...
EUVD-2007-1079
Malware in sbrugna...
EUVD-2015-0546
Malware in sbrugna...
EUVD-2019-2232
Malware in sbrugna...
EUVD-2018-2971
Malware in sbrugna...
EUVD-2021-22989
Malware in sbrugna...
EUVD-2018-1927
Malware in sbrugna...
EUVD-2002-0807
Malware in sbrugna...
EUVD-2006-6713
Malware in sbrugna...