curl: Silent TLS Trust Model Hijacking via `CURL_CA_BUNDLE` Environment Variable Leads to MITM

Summary: curl is vulnerable to silent Man-in-the-Middle MITM attacks due to its design, which implicitly trusts the CA certificate path specified in the CURLCABUNDLE environment variable. This mechanism allows the entire TLS trust model chain of trust of curl to be hijacked without any warning or...

CVE-2025-64334

creationtimestamp| type| source ---|---|--- 2025-11-06 14:22:09+00:00| seen| https://vulnerability.circl.lu/bundle/647bd131-5525-47ea-8d98-53d132cabe2e...

CVE-2025-64330

creationtimestamp| type| source ---|---|--- 2025-11-06 14:22:09+00:00| seen| https://vulnerability.circl.lu/bundle/647bd131-5525-47ea-8d98-53d132cabe2e...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989240 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpcpeer leak in rxrpclookupbundle Need to call rxrpcputpeer for bundle candidate...

Wireshark 4.4.x < 4.4.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.9 advisory. - SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service CVE-2025-9817 - Column handling crashes...

Wireshark 4.4.x < 4.4.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.9 advisory. - SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service CVE-2025-9817 - Column handlin...

CVE-2025-62784

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...

CVE-2025-62782

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...

CVE-2025-62783

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is...

EUVD-2025-36361

InventoryGui allows item duplication in GUIs which use GuiStorageElement...

CVE-2025-62782

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...

CVE-2025-62784

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...

CVE-2025-62783

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is...

CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...

CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...

CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...

CVE-2025-62784

InventoryGui is a Bukkit/Spigot plugin GUI library. CVE-2025-62784 describes a vulnerability in versions prior to 1.6.5 where GUIs using GuiStorageElement can allow item duplication when items are taken out of that element with the experimental Bundle feature enabled on the server. The issue is r...

CVE-2025-62783 InventoryGui affected by item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is...

CVE-2025-62783 InventoryGui affected by item duplication in GUIs which use GuiStorageElement

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is...

CVE-2025-62783

InventoryGui is a library for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability in GuiStorageElement that can allow item duplication when the experimental Bundle item feature is enabled on the server. The issue is mitigated by upgrading to 1.6.2-SNAPSHOT. No explo...