278147 matches found
HSEC-2023-0005 tls-extra: certificate validation does not check Basic Constraints
tls-extra: certificate validation does not check Basic Constraints tls-extra does not check the Basic Constraints extension of a certificate in certificate chain processing. Any certificate is treated as a CA certificate. As a consequence, anyone who has a valid certificate can use it to sign...
HSEC-2025-0004 Broken Path Sanitization in spacecookie Library
Broken Path Sanitization in spacecookie Library The spacecookie library exposes the functions sanitizePath and sanitizeIfNotUrl intended to remove .. components from paths which can be used to prevent path traversal attacks. Due to erroneous comparison code, this elimination is not actually...
HSEC-2025-0002 Double Public Key Signing Function Oracle Attack on Ed25519
Double Public Key Signing Function Oracle Attack on Ed25519 The standard specification of Ed25519 message signing involves providing the algorithm with a message and private key. The function will use the private key to compute the public key and sign the message. Some libraries provide a variant...
HSEC-2025-0003 Use after free in multithreaded lzma (.xz) decoder
Use after free in multithreaded lzma .xz decoder In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash CVE-2025-31115. The effects include heap use after free and writing to an address based on the null pointer plus ...
CVE-2025-8855 2FA Expiry Bypass in Optimus Software's Brokerage Automation
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry...
CVE-2025-8855
Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authentication Bypass by Assumed-Immutable Data vulnerability in Optimus Software Brokerage Automation allows Exploiting Trust in Client, Authentication Bypass, Manipulate Registry...
BELL-CVE-2025-40174
Bulletin has no description...
BELL-CVE-2025-40208
Bulletin has no description...
BELL-CVE-2025-40182
Bulletin has no description...
BELL-CVE-2025-40196
Bulletin has no description...
BELL-CVE-2025-40191
Bulletin has no description...
BELL-CVE-2025-40184
Bulletin has no description...
BELL-CVE-2025-40189
Bulletin has no description...
BELL-CVE-2025-40163
Bulletin has no description...
BELL-CVE-2025-40148
Bulletin has no description...
BELL-CVE-2025-40145
Bulletin has no description...
BELL-CVE-2025-40143
Bulletin has no description...
BELL-CVE-2025-40138
Bulletin has no description...