2103 matches found
CVE-2025-64167 Combodo iTop vulnerable to reflected XSS in webservices/export.php
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to a cross-site scripting attack leading to JS execution when editing the URL parameter. Versions 2.7.13 and 3.2.2 don't use export.php, which was deprecated. They use export-v2.php instead...
ZITADEL 安全漏洞
ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era, open sourced by ZITADEL in Switzerland. A security vulnerability exists in ZITADEL versions 4.0.0-rc.1 through 4.6.2, which stems from the presence of insecur...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990507)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990507 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035i2cmasterxfer In af9035i2cmasterxfer, msg ...
bind security update
32:9.11.36-16.6 - Address various spoofing attacks CVE-2025-40778 32:9.11.36-16.5 - Add support for max-records-per-type and max-types-per-name options RHEL-61936 - Support reading of new options also in named-checkconf -z, v2...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989738)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989738 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove A clkprepareenable call in the probe is...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989507)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989507 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035i2cmasterxfer In af9035i2cmasterxfer, msg ...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...
USN-7841-1 strongswan vulnerability
Xu Biang discovered that the strongSwan client incorrectly handled EAP-MSCHAPv2 failure requests. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service, or possibly...
MAL-2025-48851 Malicious code in meta-api-boostx-v2-pro (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in meta-api-boostx-v2-pro (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-60342
CVE-2025-60342 affects Tenda AC6 V2.0 (version 15.03.06.50). The issue is a stack overflow in the addressNat function triggered by the page parameter, due to improper input handling, leading to a Denial of Service. Multiple connected sources corroborate a stack overflow in addressNat with DoS imp...
Linux Distros Unpatched Vulnerability : CVE-2023-53501
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommuv2: Fix pasidstate refcount dec hit 0 warning on pasid unbind When unbinding...
EUVD-2020-14574
Malware in sbrugna...
EUVD-2020-3182
Malware in sbrugna...
EUVD-2017-8465
Malware in sbrugna...
EUVD-2018-6774
Malware in sbrugna...
EUVD-2017-17762
Malware in sbrugna...
EUVD-2014-7002
Malware in sbrugna...