19310 matches found
CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-60062
creationtimestamp| type| source ---|---|--- 2025-12-18 09:49:20+00:00| seen| https://gist.github.com/Darkcrai86/a4aae3d5fbfa6cbe0add53dd7cad1a26 2025-12-18 16:56:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabnfm3kma2c...
Checkmk 安全漏洞
Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0p18 and earlier, which stems from the exposure of an SSH private key in the HTML source code of the rules page, which could lead to the unauthorized triggering of a predefined alert...
PT-2025-52229
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
CVE-2025-65000: Improper Removal of Sensitive Information Before Storage or Transfer
SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...
EUVD-2025-203893
Malicious code in xbox-bottomnav npm...
CVE-2025-40353
In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copyhighpage The arm64 copyhighpage assumes that the destination page is newly allocated and not MTE-tagged PGmtetagged unset and warns accordingly. However, following comm...
Malicious Package
Overview mona-speedy-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
CVE-2025-68054
creationtimestamp| type| source ---|---|--- 2025-12-16 09:29:05+00:00| seen| https://gist.github.com/Darkcrai86/cd0e02e5dff5aa17579ba8fe5175a78b...
Linux Distros Unpatched Vulnerability : CVE-2025-40350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: RX, Fix generating skb from non-linear xdpbuff for striding RQ XDP programs can change the layout of an xdpbuff through bpfxdpadjusttail and...
CVE-2025-57919
creationtimestamp| type| source ---|---|--- 2025-12-15 12:58:40+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/al25-019-vulnerabilities-impacting-fortinet-products-forticloud-sso-login-authentication-bypass-cve-2025-59718-cve-2025-59719...
CVE-2025-9116
creationtimestamp| type| source ---|---|--- 2025-12-15 08:55:30+00:00| seen| https://gist.github.com/Darkcrai86/1dd1e83c9642f7f4e5319c0dcd70ef79...
MAL-2025-192569 Malicious code in @ikarem/telemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43d2a07b55a1387aa741edace01850ec9f79a58baac8ee1897610e2b8e77cb8 The package @ikarem/telemetry was found to contain malicious code. Source: ghsa-malware...
Remote Code Execution (RCE)
Apache DolphinScheduler is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation of user input in alert scripts, which allows an attacker to execute arbitrary shell scripts on the server...
CVE-2025-13988
creationtimestamp| type| source ---|---|--- 2025-12-12 08:20:24+00:00| seen| https://gist.github.com/Darkcrai86/9a25adcfffb25255d6578edf1a60529c...
CGA-3F9G-QP2J-CCV8
Bulletin has no description...
CVE-2025-14535
creationtimestamp| type| source ---|---|--- 2025-12-11 19:50:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702668769020088 2025-12-12 01:35:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/115704026118128056 2025-12-12 01:35:30+00:00| seen|...
Malicious code in elf-stats-rooftop-wishlist-723 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcbd1b32a8c043a4ffa56ddea354e9380466ad48a486654e7c7ee0581a4684f The package elf-stats-rooftop-wishlist-723 was found to contain malicious code...