7516 matches found
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: k8ssandra-client, kots, cilium-cli, k9s, zarf, rancher-helm, helm-docs, zot, helm-push, cert-manager-cmctl, kubescape, chartmuseum, flux-source-controller, flux-helm-controller, helm-operator, trivy, pluto, eksctl, tw, chart-testing, consul-k8s, flux,...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: k8ssandra-client, kots, cilium-cli, k9s, zarf, rancher-helm, helm-docs, zot, helm-push, cert-manager-cmctl, kubescape, chartmuseum, flux-source-controller, flux-helm-controller, helm-operator, trivy, pluto, eksctl, tw, chart-testing, consul-k8s, flux,...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: k8ssandra-client, kots, cilium-cli, k9s, zarf, rancher-helm, helm-docs, zot, helm-push, cert-manager-cmctl, kubescape, chartmuseum, flux-source-controller, flux-helm-controller, helm-operator, trivy, pluto, eksctl, tw, chart-testing, consul-k8s, flux,...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: k8ssandra-client, kots, cilium-cli, k9s, zarf, rancher-helm, helm-docs, zot, helm-push, cert-manager-cmctl, kubescape, chartmuseum, flux-source-controller, flux-helm-controller, helm-operator, trivy, pluto, eksctl, tw, chart-testing, consul-k8s, flux,...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: trivy, kots, flux-helm-controller-fips, cluster-api-helm-controller-fips, chartmuseum-fips, helm-operator-fips, k9s, flux-fips, k8ssandra-client, k8ssandra-client-fips, consul-k8s, zarf, rancher-helm, flux-helm-controller, flux, flux-source-controller, helm-push,...
QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
QuickResponseC2 is a stealthy Command and Control C2 framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network activity is limited to uploading and downloading images, making it an fully undetectable by IPS/IDS...
Exploit for CVE-2025-2825
It is an exploit module/toolkit targeting CrushedFTP. The tool,...
EulerOS 2.0 SP11 : wget (EulerOS-SA-2025-1381)
According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...
PVS BIOS based target devices are slow to boot
PVS BIOS based target devices were slow to boot, with following observations: BIOS based target devices often taking tens of minutes to boot successfully, occasionally target devices may fail to boot. The network conditions in standard production network were non optimal for PVS boot performance...
Microsoft Security Update Validation Report April 2025
Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...
CLSA-2025-1744301726 libgcrypt: Fix of CVE-2024-2236
Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...
Juniper Junos OS Vulnerability (JSA96458)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96458 advisory. - An Improper Input Validation vulnerability in the CVE-2025-30648 Note that Nessus has not tested for these issues but has instead relied only on the application's...
SUSE CVE-2024-58036
Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...
Security Updates for Microsoft Excel Products (April 2025)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...
Deserialization of Untrusted Data
Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data in scanner.py, which does not include numpy.testing.private.utils or other modules that can be leveraged for...
The vulnerability of the SIEM systems’ load testing tool, Kraken Stress Testing Toolkit, arises from the improper use of X-Content-Type-Options headers. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to the improper use of X-Content-Type-Options headers for protection mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...
The vulnerability of the SIEM system testing tool Kraken Stress Testing Toolkit lies in the reading beyond the buffer in memory, allowing a malicious actor to trigger a service failure.
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, arises from improper restrictions on the visible layers of the user interface. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected informati...
The vulnerability of the SIEM systems’ load testing tool, Kraken Stress Testing Toolkit, arises from the improper use of Content Security Policy (CSP) protection mechanisms. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to the improper use of Content Security Policy CSP protection mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...
The vulnerability of the SIEM systems’ load testing tools, Kraken Stress Testing Toolkit, arises due to deficiencies in the authentication process, allowing unauthorized users to gain access to protected information.
The vulnerability of the SIEM systems’ stress testing tools, such as Kraken Stress Testing Toolkit, stems from deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...