EUVD-2025-201789

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component allowing attackers to achieve RCE and take over the server...

CVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

PT-2025-49569

Name of the Vulnerable Software and Affected Versions HummerRisk versions through 1.5.0 Description HummerRisk is affected by an issue stemming from a vulnerable Snakeyaml component, potentially allowing attackers to achieve Remote Code Execution RCE and gain control of the server. Recommendation...

CVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

HummerCloud HummerRisk 安全漏洞

HummerCloud HummerRisk is an open source cloud-native security platform from China's HummerCloud, which solves security and governance issues in cloud-native environments in a non-intrusive way, with core capabilities including security governance for hybrid clouds and cloud-native security...

CVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

CVE-2025-63721

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server...

CVE-2025-63721

CVE-2025-63721 affects HummerRisk through v1.5.0, where a vulnerable SnakeYAML component enables remote code execution via the /rule/add API by attackers with normal user privileges. Documented across NVD/Red Hat/ENISA/CVE lists, with PoC reported and guidance to update beyond 1.5.0. No exploit d...

TencentOS Server 3: prometheus-jmx-exporter (TSSA-2023:0146)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0146 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EUVD-2021-1404

Malware in sbrugna...

EUVD-2018-0619

Malware in sbrugna...

EUVD-2021-8632

Malicious code in bioql PyPI...

EUVD-2022-6773

Malicious code in bioql PyPI...

EUVD-2023-2088

Malicious code in bioql PyPI...

EUVD-2023-56110

Malicious code in bioql PyPI...

EUVD-2022-6839

Malicious code in bioql PyPI...

EUVD-2022-6769

Malicious code in bioql PyPI...

EUVD-2022-6753

Malicious code in bioql PyPI...

EUVD-2022-7446

Malicious code in bioql PyPI...

EUVD-2022-3355

Malicious code in bioql PyPI...