Lucene search
+L

20409 matches found

Snyk
Snyk
added 2026/01/09 2:02 a.m.6 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the UpdateStatus cycle of VM controller in virt handler that fetches all the guest interfaces from QEMU guest agent and adds them to interface status of the VMI. An attacker can disrupt...

6.4CVSS6.7AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/09 12:00 a.m.8 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...

3.5CVSS6.1AI score0.00236EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/09 12:00 a.m.9 views

PT-2026-2241

Name of the Vulnerable Software and Affected Versions WeKnora versions prior to 0.2.5 Description WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Insufficient backend validation allows attackers to bypass query restrictions and obtain sensitive...

9.8CVSS6.9AI score0.00367EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:00 a.m.7 views

SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2026:0067-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0067-1 advisory. - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size...

5.3CVSS6.3AI score0.0051EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:00 a.m.7 views

Siemens Ruggedcom ROX Improper Authentication (CVE-2022-0492)

A vulnerability was found in the Linux kernel's cgroupreleaseagentwrite in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 releaseagent feature to escalate privileges and bypass the namespace isolation unexpectedly. This plugin only...

7.8CVSS6.9AI score0.05528EPSS
SaveExploits12References3
OpenVAS
OpenVAS
added 2026/01/09 12:00 a.m.6 views

openSUSE Security Advisory (SUSE-SU-2026:0067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.0051EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2026/01/08 12:22 p.m.13 views

Security update for podman

This update for podman fixes the following issues: CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size bsc1253993 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...

6.9CVSS6.8AI score0.0051EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/08 12:22 p.m.7 views

SUSE-SU-2026:0067-1 Security update for podman

This update for podman fixes the following issues: - CVE-2025-47914: Fixed ssh-agent that could cause a panic due to an out-of-bounds read with non validated message size bsc1253993...

5.3CVSS5.8AI score0.0051EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/01/08 10:45 a.m.27 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via CURLSSHAUTHAGENT flag for public key authentication. An attacker can gain unauthorized access by leveraging a locally running SSH agent to bypass the intended key passphrase requirement. Note: This issue...

4.7CVSS5.8AI score0.00429EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/08 10:15 a.m.9 views

CVE-2025-15224

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

3.1CVSS0.00429EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/08 10:08 a.m.6 views

CVE-2025-15224 libssh key passphrase bypass without agent set

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

6.5AI score0.00429EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/01/08 10:08 a.m.12 views

CVE-2025-15224

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

3.1CVSS5.9AI score0.00429EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2026/01/08 10:08 a.m.16 views

CVE-2025-15224

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

3.1CVSS6.6AI score0.00429EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/08 10:08 a.m.11 views

CVE-2025-15224 libssh key passphrase bypass without agent set

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

3.1CVSS6.6AI score0.00429EPSS
SaveExploits1References6
GithubExploit
GithubExploit
added 2026/01/08 3:26 a.m.264 views

Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

SploitGPT An autonomous AI penetration testing agent that con...

10CVSS10AI score0.99999EPSS
SaveExploits373
EUVD
EUVD
added 2026/01/08 1:01 a.m.7 views

EUVD-2026-1649

Malicious code in hoppscotch-agent npm...

6.6AI score
SaveExploits0References1
OSV
OSV
added 2026/01/08 1:01 a.m.5 views

MAL-2026-150 Malicious code in hoppscotch-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9fa1661ed3de2ac221307d7e5cac1aea785ac1d0e2241ecd0001a05fea796 The package hoppscotch-agent was found to contain malicious code. Source: ghsa-malware 7c2ae92a02c69aaa3b5287d2172d0fbc6f8f1e3ae51c69f76c7a07e4dcc7a1...

6.8AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/08 1:01 a.m.3 views

Malicious Package

Overview hoppscotch-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/08 1:01 a.m.11 views

Malicious code in hoppscotch-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9fa1661ed3de2ac221307d7e5cac1aea785ac1d0e2241ecd0001a05fea796 The package hoppscotch-agent was found to contain malicious code. Source: ghsa-malware 7c2ae92a02c69aaa3b5287d2172d0fbc6f8f1e3ae51c69f76c7a07e4dcc7a1...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2026/01/08 12:00 a.m.9 views

Tenable Nessus Agent Privilege Escalation Vulnerability (TNS-2026-01)

Tenable Nessus Agent is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7AI score0.00116EPSS
SaveExploits0References1
Rows per page
Query Builder