2648 matches found
EUVD-2024-51923
Malicious code in bioql PyPI...
EUVD-2025-15797
Malicious code in bioql PyPI...
EUVD-2024-51057
Malicious code in bioql PyPI...
EUVD-2023-29659
Malicious code in bioql PyPI...
EUVD-2025-25397
Malicious code in bioql PyPI...
EUVD-2022-15542
Malicious code in bioql PyPI...
Apache Tomcat: Request header mix-up between HTTP/2 streams
...
Denial Of Service (DoS)
Netty is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of malformed HTTP/2 control frames due to a flaw in enforcing the max concurrent streams limit, leading to resource exhaustion and denial of service...
NewStart CGSL MAIN 6.06 : cups Multiple Vulnerabilities (NS-SA-2025-0218)
The remote NewStart CGSL host, running version MAIN 6.06, has cups packages installed that are affected by multiple vulnerabilities: - ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to...
Security Bulletin:IBM Event Streams is vulnerable to Regular Expression Denial of Service (ReDoS) ( CVE-2025-1302).
Summary IBM Event Streams is vulnerable to Regular Expression Denial of Service ReDoS caused by Inefficient Regular Expression Complexity. This issue affects JavaScript code that is compiled using certain versions of Babel . Babel is a JavaScript transcompiler used for converting modern JavaScrip...
Security Bulletin:IBM Event Streams is vulnerable to HTTP Parameter Pollution (HPP) attack (CVE-2025-7783).
Summary IBM Event Streams is vulnerable to an HTTP Parameter Pollution HPP attack due to the use of random values in the form-data module. This vulnerability affects how data from HTML forms is processed, particularly during form submission or when interacting with event listeners tied to form...
CVE-2025-9983
GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...
Important: Red Hat Security Advisory: Streams for Apache Kafka 3.0.1 release and security update
Streams for Apache Kafka 3.0.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2025-9983
The CVE-2025-9983 affects GALAYOU G2 IP cameras, where RTSP streams can be accessed without valid credentials. The issue arises because default credentials are not required to access streams, and changing them does not affect behavior, indicating an authentication bypass in the RTSP service. Affe...
CVE-2025-9983 Lack of Authentication for RTSP stream
GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only...
GALAYOU G2 访问控制错误漏洞
The GALAYOU G2 is a surveillance camera from GALAYOU USA. An access control error vulnerability exists in GALAYOU G2 version 11.100001.01.28, which stems from RTSP streams that do not properly implement credential validation, which could lead to unauthorized access to video streams...
HPESBNW04943 rev.2 - HPE Aruba Networking EdgeConnect SD-WAN Gateways, Multiple Vulnerabilities
Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Bypass Security Restrictions, Disclosure of Sensitive Information, Unauthorized Access to Sensitive Information, Unauthorized Read Access to Data, Unauthorized Read Access to Files, Unqualified Configuratio...
Fetch streams are great, but not for measuring upload/download progress
Part of my role at Mozilla is making sure we're focusing on the right features, and we got onto the topic of fetch upload streams. It's something Chrome has supported for a while, but it isn't yet supported in either Firefox or Safari. I asked folks on various social platforms what they thought o...
