3361 matches found
CVE-2025-30506
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
CVE-2025-37734 Kibana Origin Validation Error
Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant...
Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-24)
Kibana Origin Validation Error ESA-2025-24 Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Affected Versions: 8.12.0 up to and including 8.19.6 9.1.0 up to and including 9.1.6 9.2.0 Affected...
PT-2025-46587
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An origin validation error in Kibana may allow for Server-Side Request Forgery SSRF through a manipulated Origin HTTP header. This manipulation occurs during processing by the Observability AI...
EUVD-2025-93494
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-30506
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This...
CVE-2025-30506
Summary of CVE-2025-30506 (Intel DSA) : Affected product is Intel Driver and Support Assistant (DSA) software prior to version 25.2. The issue is an uncontrolled search path that can enable privilege escalation. An unprivileged, authenticated user with high attack complexity and active user inter...
EUVD-2025-93149
Malicious code in assistantwarblerz3n npm...
EUVD-2025-93151
Malicious code in assistantpheasantz3n npm...
EUVD-2025-93150
Malicious code in assistantscallopz3n npm...
EUVD-2025-74879
Malicious code in assistantpheasantindigo-98 npm...
EUVD-2025-77444
Malicious code in assistantbuggreen-2 npm...
EUVD-2025-77729
Malicious code in assistantpigz3n npm...
EUVD-2025-82806
Malicious code in assistantwolverinez3n npm...
EUVD-2025-71667
Malicious code in assistantmothz3n npm...
Malicious code in assistant_alligator_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7395c0e1bbb0740d2fbb3a7112ca995068f1a181fa3c4a97c3caa8aa92818d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...