20525 matches found
Murrelektronik Firmware Impact67 安全漏洞
Murrelektronik Firmware Impact67 is a series of field module firmware from Murrelektronik, Germany. A security vulnerability exists in Murrelektronik Firmware Impact67 Pro 54630, which originates from the transmission of sensitive information in clear text and could allow an unauthorized remote...
KLA89275 SUI vulnerability in Microsoft Open Source Software
A spoofing vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-59288 CVE list CVE-2025-59288 high Solution Install necessary updates from the KB section, that are listed in your Windows...
UI for Apache Kafka 安全漏洞
UI for Apache Kafka is an open source front-end interface for Kafka by Provectus. A security vulnerability exists in UI for Apache Kafka versions v0.6.0 through v0.7.2, which originates from the upload of a specially crafted configuration file and could lead to a denial of service attack...
CVE-2025-60537
CVE-2025-60537 affects Kafka UI, specifically the component "/kafka/ui/serdes/CustomSerdeLoader.java" in versions v0.6.0 to v0.7.2. The root cause is improper input validation in this loader, allowing attackers to execute arbitrary code when supplied with crafted data. The statements in connected...
PT-2025-42164
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...
Text Generation Web UI 后置链接漏洞
Text Generation Web UI is a UI interface for native AI by oobabooga individual developers. A backlink vulnerability exists in Text Generation Web UI version 3.13 and earlier, which stems from a local file inclusion vulnerability in the character image upload feature that could result in reading...
PT-2025-41846
Name of the Vulnerable Software and Affected Versions YouDataSum CPAS Audit Management System versions prior to 4.9 Description The YouDataSum CPAS Audit Management System is susceptible to SQL Injection due to inadequate input validation. This allows remote, unauthenticated attackers to execute...
Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview react-ui-toast is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48321 Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-33878
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
CVE-2025-59530 vulnerabilities
Vulnerabilities for packages: traefik, dkron, k3s, ipfs-cluster, spegel, frp, caddy, kubo, kargo, kyverno-policy-reporter-ui, k8sgateway, kubernetes-dns-node-cache, q...
GHSA-47M2-4CR7-MHCW vulnerabilities
Vulnerabilities for packages: traefik, dkron, k3s, ipfs-cluster, spegel, frp, caddy, kubo, kargo, kyverno-policy-reporter-ui, k8sgateway, kubernetes-dns-node-cache, q...
CVE-2025-59530 vulnerabilities
Vulnerabilities for packages: traefik, dkron, kubernetes-dns-node-cache-fips, kubo-fips, spegel-fips, spegel, teleport, rke2-runtime, caddy, coredns, frp, ipfs-cluster-fips, syncthing, syncthing-fips, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, k8sgateway-fips, kubo, eks-distro,...
CVE-2025-4614
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue ...
Malicious Package
Overview react-toast-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48303 Malicious code in react-toast-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-toast-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...