CVE-2025-3082

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...

Missing Authorization

Overview goalgorilla/opensocial is a distribution for building social communities and intranets. Affected versions of this package are vulnerable to Missing Authorization allowing users to see invites for other specific users. Remediation Upgrade goalgorilla/opensocial to version 12.3.11, 12.4.10...

[SECURITY] [DLA 4096-1] librabbitmq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4096-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 30, 2025 https://wiki.debian.org/LTS -...

Debian dla-4096 : amqp-tools - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4096 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4096-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-28138

creationtimestamp| type| source ---|---|--- 2025-03-28 19:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114241785248469459 2025-03-28 19:48:23+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114241785248469459 2025-03-29 00:02:46+00:00| seen|...

CVE-2024-55604

Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as "App Viewer" should not have access to development information of a workspace. Datasources are such a component in a workspace. Yet, in versions of Appsmith prior to 1.51, app viewers are able to get a...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the account visibility settings. An attacker can view and interact with private posts and accounts by leveraging the improper enforcement of access controls. Remediation Upgrade pixelfed/pixelfed to version...

CVE-2024-9612

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of channel conversion restrictions. An attacker can exploit this flaw to change channel visibility settings without proper authorization by manipulating channel settings. Remediation...

CVE-2024-9612

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

CVE-2024-9612 Unauthorized Access in danswer-ai/danswer

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

CVE-2024-9612

In danswer-ai/danswer v0.3.94, the vulnerability stems from the back-end not validating the visibility status of the search page. Administrators can hide the search page from the front-end, but regular users can still access its functionalities by directly calling the API, bypassing the visibilit...

CVE-2024-9612 Unauthorized Access in danswer-ai/danswer

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

CVE-2024-9612 Unauthorized Access in danswer-ai/danswer

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

Danswer 安全漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. A security vulnerability exists in Danswer version v0.3.94, which stems from the back-end not validating the visibility status of a search page, which could allow an...

PT-2025-12288

Name of the Vulnerable Software and Affected Versions danswer-ai/danswer version 0.3.94 Description The issue allows attackers to bypass the visibility restriction set by administrators for the search page. When the search page is set to be invisible, regular users cannot view it or access its...

CVE-2024-9612: Insufficient Isolation of System-Dependent Functions

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

CVE-2025-2395

creationtimestamp| type| source ---|---|--- 2025-03-17 06:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkkkbsyv2v2v 2025-03-17 07:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114176668990422188 2025-03-17 08:00:53+00:00| seen|...

Creating Scripts to Identify Vulnerable Oracle Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of Oracle servers. It also covers methods to mitigate the public visibility of banners and version information on Oracle servers. Written in Portuguese...

Creating Scripts to Identify Vulnerable Proxy Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of proxy servers. It also covers methods to mitigate the public visibility of banners and version information on proxy servers. Written in Portuguese...