420 matches found
EUVD-2018-0794
Malware in sbrugna...
EUVD-2017-5840
Malware in sbrugna...
Akka.Remote TLS did not properly implement certificate-based authentication
This is a critical network security vulnerability for Akka.Remote users who have SSL / TLS enabled on their Akka.Remote connections and were expecting certificate-based authentication to be enforced on all peers attempting to join the network. In all versions of Akka.Remote from v1.2.0 to v1.5.51...
Akka.Remote TLS did not properly implement certificate-based authentication
This is a critical network security vulnerability for Akka.Remote users who have SSL / TLS enabled on their Akka.Remote connections and were expecting certificate-based authentication to be enforced on all peers attempting to join the network. In all versions of Akka.Remote from v1.2.0 to v1.5.51...
User Impersonation
Overview Akka.Remote is a .NET port of the popular Akka project from the Scala / Java community. Affected versions of this package are vulnerable to User Impersonation due to improper implementation of certificate-based authentication in the akka.remote.dot-netty.tcp transport. An attacker can ga...
CVE-2025-61778 Akka.Remote TLS did not properly implement certificate-based authentication
Akka.NET is a .NET port of the Akka project from the Scala / Java community. In all versions of Akka.Remote from v1.2.0 to v1.5.51, TLS could be enabled via our akka.remote.dot-netty.tcp transport and this would correctly enforce private key validation on the server-side of inbound connections...
CVE-2025-61778
CVE-2025-61778 affects Akka.Remote in Akka.NET (versions 1.2.0–1.5.51). The TLS implementation on the akka.remote.dot-netty.tcp transport correctly validates private keys on the server side for inbound connections, but outbound clients were never required to present a certificate, allowing untrus...
PT-2025-40934
Name of the Vulnerable Software and Affected Versions Akka.NET versions 1.2.0 through 1.5.51 Description Akka.NET, a .NET port of the Akka project, has an issue where the Akka.Remote component did not implement mutual TLS mTLS in versions 1.2.0 through 1.5.51. When TLS was enabled via the...
EUVD-2022-1756
Malicious code in bioql PyPI...
EUVD-2022-5091
Malicious code in bioql PyPI...
EUVD-2025-3168
Malicious code in bioql PyPI...
EUVD-2022-35527
Malicious code in bioql PyPI...
EUVD-2022-28126
Malicious code in bioql PyPI...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the API. An attacker can perform unauthorized actions, such as creating and starting arbitrary instances or executing arbitrary commands inside containers, by tricking a victim authenticated with clien...
CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...
CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...
CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...
CVE-2025-54286
Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication...
SUSE SLES15 / openSUSE 15 Security Update : nginx (SUSE-SU-2025:03444-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03444-1 advisory. - CVE-2025-53859:?the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. ...
LXD 安全漏洞
LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD 5.0 and prior versions, which stems from a cross-site request forgery in client certificate authentication that could lead to the creation and launch of container...