Lucene search
+L

4506 matches found

RedHat Linux
RedHat Linux
•added 2025/09/11 4:22 p.m.•95 views

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

8CVSS7.1AI score0.00968EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/09/11 4:10 p.m.•34 views

cups: Authentication Bypass in CUPS Authorization Handling

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

8CVSS7.1AI score0.00968EPSS
SaveExploits1References5
SUSE Linux
SUSE Linux
•added 2025/09/11 4:06 p.m.•4 views

Security update for cups

This update for cups fixes the following issues: CVE-2025-58060: no password check when AuthType is set to anything but Basic and a request is made with an Authorization: Basic header bsc1249049. CVE-2025-58364: unsafe deserialization and validation of printer attributes leads to NULL pointer...

7.7CVSS7.1AI score0.01067EPSS
SaveExploits2References8
RedhatCVE
RedhatCVE
•added 2025/09/11 1:47 p.m.•12 views

CVE-2025-58060

A flaw was found in CUPS, a widely used printing service on Linux and UNIX-like systems. The issue arises when authentication is configured to use a method other than Basic, but the attacker sends an HTTP request with a Basic authentication header. Due to improper validation in the cupsdAuthorize...

8CVSS6.1AI score0.00968EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/11 1:00 p.m.•14 views

UBUNTU-CVE-2025-58060

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in...

8CVSS7.1AI score0.00968EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2025/09/11 12:00 p.m.•22 views

Moderate: Red Hat Security Advisory: php:8.2 security update

An update for the php:8.2 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS6.8AI score0.02286EPSS
SaveExploits5References9
RedhatCVE
RedhatCVE
•added 2025/09/11 2:09 a.m.•23 views

CVE-2025-42915

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS6.7AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/11 12:00 a.m.•5 views

OpenPrinting CUPS 授权问题漏洞

OpenPrinting CUPS is a standards-based open source printing system for LinuxÂŽ and other UnixÂŽ-like operating systems from OpenPrinting, Inc. An authorization issue vulnerability exists in OpenPrinting CUPS versions 2.4.12 and earlier, which stems from a failure to check the password in the...

8CVSS8.3AI score0.00968EPSS
SaveExploits1References2
OSV
OSV
•added 2025/09/11 12:00 a.m.•10 views

ALSA-2025:15687 Moderate: php:8.2 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 php: Configuring ...

9.8CVSS7.1AI score0.02286EPSS
SaveExploits5References18
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2011-0160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might...

5CVSS5.4AI score0.01549EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/09 2:15 a.m.•24 views

CVE-2025-42915

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS0.00182EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/09 2:06 a.m.•7 views

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS6.2AI score0.00182EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/09 2:06 a.m.•41 views

CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...

5.4CVSS0.00182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•10 views

PT-2025-36548

Name of the Vulnerable Software and Affected Versions: Fiori app Manage Payment Blocks affected versions not specified Description: The Fiori app Manage Payment Blocks does not perform the necessary authorization checks. This allows an attacker with basic user privileges to abuse functionalities...

5.4CVSS6.1AI score0.00182EPSS
SaveExploits0References6
Debian
Debian
•added 2025/09/08 4:54 p.m.•12 views

[SECURITY] [DLA 4168-2] openafs regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4168-2 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 08, 2025 https://wiki.debian.org/LTS -...

6.7AI score
SaveExploits0
Fedora
Fedora
•added 2025/09/08 12:55 a.m.•23 views

[SECURITY] Fedora 42 Update: tcpreplay-4.5.2-1.fc42

Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...

5.9CVSS5AI score0.00997EPSS
SaveExploits4
Gitee
Gitee
•added 2025/09/06 12:38 a.m.•276 views

Exploit for CVE-2017-0143

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。re...

9.3CVSS8.4AI score0.99693EPSS
SaveExploits105
OSV
OSV
•added 2025/09/05 5:10 p.m.•4 views

MAL-2025-44908 Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•5 views

Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

7AI score
SaveExploits0
CNVD
CNVD
•added 2025/09/05 12:00 a.m.•14 views

Tenda AC8 formWifiBasicSet function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. A buffer overflow vulnerability exists in the Tenda AC8, which is caused by the formWifiBasicSet function failing to correctly...

7.5CVSS7.4AI score0.00397EPSS
SaveExploits1References1
Rows per page
Query Builder