2775 matches found
EUVD-2025-35709
An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may submit a crafted job request that grants read access to files on the filesystem with the permissions of the GXP Job Service process. The path to a file is not sanitized f...
VulnCheck KEV: CVE-2025-49596
The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...
Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2ECS-2025-075 (ALASECS-2025-075)
The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-075 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking...
Ivanti EPMM 操作系统命令注入漏洞
Ivanti EPMM is a product from Ivanti USA that enables IT departments to set policies for mobile devices, applications and content. An operating system command injection vulnerability exists in Ivanti EPMM versions prior to 12.6.0.2, 12.5.0.4, and 12.4.0.4, which stems from the presence of os...
EUVD-2025-28745
E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...
python-ldap 安全漏洞
python-ldap is a python foundation LDAP client API for Python. A security vulnerability exists in python-ldap versions prior to 3.4.5, which stems from the ldap.filter.escapefilterchars method not properly handling the assertionvalue parameter of type list or dict in escapemode=1 mode, which coul...
CVE-2025-59998
Summary: CVE-2025-59998 affects Juniper Networks Junos Space versions prior to 24.1R4, due to an improper neutralization of input during web page generation that enables cross-site scripting on the Archive Log screen. An attacker can inject script tags; when another user visits the affected page,...
EUVD-2013-0919
Malware in sbrugna...
EUVD-2019-7302
Malware in sbrugna...
EUVD-2020-3812
Malware in sbrugna...
EUVD-2008-0630
Malware in sbrugna...
EUVD-2012-1200
Malware in sbrugna...
EUVD-2020-26591
Malware in sbrugna...
EUVD-2015-7722
Malware in sbrugna...
EUVD-2002-0159
Malware in sbrugna...
EUVD-2002-2222
Malware in sbrugna...
EUVD-2016-6374
Malware in sbrugna...
EUVD-2002-0356
Malware in sbrugna...