4376 matches found
CVE-2025-30506
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-24)
Kibana Origin Validation Error ESA-2025-24 Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Affected Versions: 8.12.0 up to and including 8.19.6 9.1.0 up to and including 9.1.6 9.2.0 Affected...
PT-2025-46587
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An origin validation error in Kibana may allow for Server-Side Request Forgery SSRF through a manipulated Origin HTTP header. This manipulation occurs during processing by the Observability AI...
CVE-2025-37734: Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
EUVD-2025-93494
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-30506
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-30506
Summary of CVE-2025-30506 (Intel DSA) : Affected product is Intel Driver and Support Assistant (DSA) software prior to version 25.2. The issue is an uncontrolled search path that can enable privilege escalation. An unprivileged, authenticated user with high attack complexity and active user inter...
EUVD-2025-93151
Malicious code in assistantpheasantz3n npm...
EUVD-2025-93150
Malicious code in assistantscallopz3n npm...
EUVD-2025-93149
Malicious code in assistantwarblerz3n npm...
EUVD-2025-74879
Malicious code in assistantpheasantindigo-98 npm...
EUVD-2025-77444
Malicious code in assistantbuggreen-2 npm...
EUVD-2025-77729
Malicious code in assistantpigz3n npm...
EUVD-2025-82806
Malicious code in assistantwolverinez3n npm...
EUVD-2025-71667
Malicious code in assistantmothz3n npm...