12390 matches found
Oracle Linux 10 : glibc (ELSA-2025-13240)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13240 advisory. - CVE-2025-8058: Double free in regcomp RHEL-105324 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...
RHEL 10 : glibc (RHSA-2025:13240)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13240 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cac...
UBUNTU-CVE-2025-54119
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database a...
SUSE CVE-2025-6227
Mattermost versions 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API...
Experimental Evaluation of Post-Quantum Homomorphic Encryption for Privacy-Preserving V2X Communication
Intelligent Transportation Systems ITS fundamentally rely on vehicle-generated data for applications such as congestion monitoring and route optimization, making the preservation of user privacy a critical challenge. Homomorphic Encryption HE offers a promising solution by enabling computation on...
OpenNebula 竞争条件问题漏洞
OpenNebula is an OpenNebula open source cloud computing platform for managing heterogeneous distributed data center infrastructures. A competitive condition issue vulnerability exists in OpenNebula Community Edition prior to 7.0.0 and Enterprise Edition prior to 6.10.3, which stems from the...
Metasploit Wrap-Up 08/01/2025
ESC support in Metasploit This week, we're excited to announce that Metasploit users can now detect certificate templates vulnerable to ESC9, ESC10, and ESC16 using the existing ldapescvulnerabletemplate module. In addition, users can now exploit these vulnerable templates with the brand new...
SUSE-SU-2025:02597-1 Security update for python310
This update for python310 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705...
Dell SmartFabric OS10 Software Code Issue Vulnerability
Dell SmartFabric OS10 Software is network operating system software developed by Dell to simplify the management and automation of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5 that stems from improper handling of X...
i-Educar 安全漏洞
i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10, which stems from a cross-site scripting attack due to the incorrect operation of the parameter refcodmatricula in the file /educaralunolst.php...
The vulnerability of the SmartFabric OS10 network operating system, related to the use of pre-installed user accounts, allows a perpetrator to escalate their privileges.
The vulnerability of the SmartFabric OS10 network operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker to increase their privileges...
UBUNTU-CVE-2025-53113
GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the external links feature to fetch...
ImageSharp 安全漏洞
ImageSharp is a new, full-featured, fully managed, cross-platform 2D graphics API open-sourced by Six Labors. A security vulnerability exists in ImageSharp versions prior to 2.1.11 and 3.0.0 through 3.1.10, which stems from the possibility of entering an infinite loop when processing specially...
Oracle Linux 10 : kernel (ELSA-2025-11855)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11855 advisory. 6.12.0-55.24.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...
Dell SmartFabric OS10 Software 代码问题漏洞
Dell SmartFabric OS10 Software is network operating system software developed by Dell to simplify the management and automation of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5 that stems from improper handling of X...
Dell SmartFabric OS10 Software 安全漏洞
Dell SmartFabric OS10 Software is network operating system software developed by Dell for automated configuration and management of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5, which stems from fixed credentials...
Zimbra Collaboration 安全漏洞
Zimbra Collaboration is an open source enterprise-class email and collaboration platform from Zimbra, Inc. that supports email, calendaring, document management, and team collaboration features. A security vulnerability exists in Zimbra Collaboration 10.1 and prior versions, which stems from...
WordPress plugin YouTube Embed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Secure Coding for Web Applications: Frameworks, Challenges, and the Role of LLMs
Secure coding is a critical yet often overlooked practice in software development. Despite extensive awareness efforts, real-world adoption remains inconsistent due to organizational, educational, and technical barriers. This paper provides a comprehensive review of secure coding practices across...