CVE-2025-11602 Untargeted information leak in Bolt protocol handshake

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

CVE-2025-11602

The CVE-2025-11602 issue affects Neo4j Bolt protocol handshakes in both Neo4j Enterprise and Community editions. The flaw allows an attacker to obtain one byte of information from a previous connection during the bolt handshake, with the leaked data being under attacker control over the responses...

CVE-2025-11602 Untargeted information leak in Bolt protocol handshake

Potential information leak in bolt protocol handshake in Neo4j Enterprise and Community editions allows attacker to obtain one byte of information from previous connections. The attacker has no control over the information leaked in server responses...

Neo4j Enterprise Edition和Neo4j Community Edition 安全漏洞

Neo4j Enterprise Edition and Neo4j Community Edition are both graph databases from Neo4j USA. A security vulnerability exists in Neo4j Enterprise Edition and Neo4j Community Edition that stems from information disclosure during the bolt protocol handshake, which could lead to an attacker obtainin...

PT-2025-44600

Name of the Vulnerable Software and Affected Versions Neo4j versions prior to 2025-11602 Description A potential information leak exists in the bolt protocol handshake within Neo4j Enterprise and Community editions. This allows an attacker to obtain one byte of information from previous...

MAL-2025-49377 Malicious code in github.com/boltdb-go/bolt (Git)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1cad7a46a80076eedc2c3c00be0d3215bdfed842f6cc04c238d3b2591b38e2ad This malicious git repository is a typosquat of the legitimate BoltDB Go package. It contains a backdoor that enables remote code executio...

WordPress Backup Bolt plugin Arbitrary File Download Vulnerability

WordPress Backup Bolt plugin is a backup plugin for WordPress websites, mainly used to automate the backup of website data including files, databases, etc., and support the recovery function. WordPress Backup Bolt plugin has an arbitrary file download vulnerability, which stems from a flaw in the...

EUVD-2019-0744

Malware in sbrugna...

EUVD-2020-0450

Malware in sbrugna...

EUVD-2020-28497

Malware in sbrugna...

EUVD-2021-0567

Malware in sbrugna...

EUVD-2020-0462

Malware in sbrugna...

EUVD-2021-13795

Malware in sbrugna...

EUVD-2021-1214

Malware in sbrugna...

CVE-2025-10306

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

WordPress Backup Bolt plugin <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download vulnerability

Authenticated Admin+ Arbitrary File Download vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Backup Bolt versions = 1.4.1...

EUVD-2022-1744

Malicious code in bioql PyPI...

EUVD-2022-52864

Malicious code in bioql PyPI...

EUVD-2024-2450

Malicious code in bioql PyPI...

EUVD-2022-5624

Malicious code in bioql PyPI...