3891 matches found
CVE-2025-60262
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...
CVE-2025-60262
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...
SUSE CVE-2025-68945
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
CVE-2025-60262
The CVE-2025-60262 entry applies to H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, due to a misconfiguration in the vsftpd component. The issue allows files uploaded anonymously via FTP to be owned by root, enabling remote attackers to gain root-lev...
CVE-2025-60262
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...
PT-2026-1438
Name of the Vulnerable Software and Affected Versions H3C M102G HM1A0V200R010 wireless controller H3C BA1500L SWBA1A0V100R006 wireless access point Description A misconfiguration exists in the vsftpd component of the affected devices. This allows remote attackers to gain root-level control over t...
CVE-2025-60262
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...
Nexus Repository Anonymous Access
Nexus Repository Manager is a popular repository management tool used to store and manage software artifacts. If anonymous access is enabled, unauthenticated users can list and browse repositories, potentially exposing private artifacts such as source code, packages, and Docker images. No source...
BIT-GITEA-2025-68945
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
Missing Authorization
Overview galaxy-web-apps is a Galaxy web apps Affected versions of this package are vulnerable to Missing Authorization in the create function in visualizations.py.An anonymous user can create visualizations. Remediation Upgrade galaxy-web-apps to version 25.1.dev0 or higher. References - GitHub...
Post-Quantum Cryptography Key Expansion Method and Anonymous Certificate Scheme Based on NTRU
NTRU is one of the important lattice-based post-quantum cryptography methods, offering resistance against quantum computing attacks. However, a drawback of NTRU lies in its relatively low efficiency in generating key pairs. Therefore, this study proposes an NTRU-based key expansion method that...
PT-2026-6147
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the mm/vma subsystem, specifically related to merging Virtual Memory Areas VMAs after a memory remapping operation mremap. The...
PT-2026-27740
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mm/thp subsystem related to transparent huge pages THP. The file thp enabled function incorrectly permits THP for files residing on anonymous...
GO-2025-4262 Gitea: anonymous user can visit private user's project in code.gitea.io/gitea
Gitea: anonymous user can visit private user's project in code.gitea.io/gitea...
CVE-2025-68945
A flaw was found in Gitea. An anonymous user can exploit this vulnerability by visiting a private user's project, leading to unauthorized information disclosure. This allows an attacker to view details of projects that should remain private. Mitigation Mitigation for this issue is either not...
GHSA-7XQ4-MWCP-Q8FX Gitea: anonymous user can visit private user's project
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
Gitea: anonymous user can visit private user's project
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
CVE-2025-68945
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
CVE-2025-68945
The CVE-2025-68945 issue affects Gitea prior to 1.21.2, where an anonymous user could visit a private user’s project, potentially exposing project details. Connected advisories (OSV entries and vendor/go-sources) confirm the vulnerability in Gitea’s routing layers (e.g., routers/api/v1 and router...
