Lucene search
K

940 matches found

OSV
OSV
added 2025/12/23 6:26 p.m.2 views

MAL-2025-192753 Malicious code in chai-async-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References1
EUVD
EUVD
added 2025/12/17 7:48 p.m.4 views

EUVD-2025-203948

AVideo versions prior to 20.0 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains...

6.9CVSS6.4AI score0.00731EPSS
Exploits2References4
ATTACKERKB
ATTACKERKB
added 2025/12/17 7:48 p.m.2 views

CVE-2025-34442

AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains...

7.5CVSS5.3AI score0.00731EPSS
Exploits2References6
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.3 views

PT-2025-51875

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 20.1 Description AVideo versions prior to 20.1 disclose absolute filesystem paths through multiple public API endpoints. The returned metadata includes full server paths to media files, revealing the underlying...

7.5CVSS6.6AI score0.00731EPSS
Exploits2References7
RedhatCVE
RedhatCVE
added 2025/12/11 5:3 a.m.6 views

CVE-2025-65512

A Server-Side Request Forgery SSRF vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to...

7.5CVSS6.9AI score0.00442EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/10 9:31 p.m.2 views

EUVD-2025-202627

A Server-Side Request Forgery SSRF vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to...

6.4AI score0.00442EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/12/10 6:58 a.m.4 views

CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

4.7CVSS5.7AI score0.00168EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/10 12:36 a.m.2 views

SUSE CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

4.7CVSS6.4AI score0.00168EPSS
Exploits0References17
Vulnrichment
Vulnrichment
added 2025/12/10 12:0 a.m.3 views

CVE-2025-65512

A Server-Side Request Forgery SSRF vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to...

6.6AI score0.00442EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/12/10 12:0 a.m.19 views

CVE-2025-65512

A Server-Side Request Forgery SSRF vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to...

0.00442EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.5 views

PT-2025-50494

Name of the Vulnerable Software and Affected Versions markdownify-mcp versions prior to 0.0.3 Description A Server-Side Request Forgery SSRF issue exists in the webpage-to-markdown conversion feature. This allows an attacker to circumvent private IP restrictions using hostname-based bypass and HT...

7.5CVSS6.7AI score0.00442EPSS
Exploits1References5
CVE
CVE
added 2025/12/10 12:0 a.m.14 views

CVE-2025-65512

Markdownify MCP Server vulnerability CVE-2025-65512 affects markdownify-mcp v0.0.2 and earlier. The flaw is a Server-Side Request Forgery (SSRF) in the webpage-to-markdown conversion feature that can bypass private IP restrictions via hostname-based bypass and HTTP redirect chains, enabling acces...

7.5CVSS6.6AI score0.00442EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/12/09 3:31 a.m.4 views

EUVD-2023-60129

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

5.8AI score0.00168EPSS
Exploits0References5
OSV
OSV
added 2025/12/09 1:16 a.m.1 views

DEBIAN-CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

5.4AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2025/12/09 1:16 a.m.6 views

CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

0.00168EPSS
Exploits0References4
OSV
OSV
added 2025/12/09 1:16 a.m.0 views

UBUNTU-CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

5.7AI score0.00168EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/12/09 12:0 a.m.27 views

CVE-2023-53777 erofs: kill hooked chains to avoid loops on deduplicated compressed images

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

0.00168EPSS
Exploits0References4
CVE
CVE
added 2025/12/09 12:0 a.m.10 views

CVE-2023-53777

CVE-2023-53777 affects the Linux kernel’s EROFS subsystem, specifically when using data-deduplicated compressed images. A race can form looping chains (hooked chains) between pclusters, potentially causing file pages to remain locked forever. The vulnerability description confirms it is observed ...

6AI score0.00168EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/12/09 12:0 a.m.3 views

CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

5.4AI score0.00168EPSS
Exploits0
OSV
OSV
added 2025/12/09 12:0 a.m.4 views

CVE-2023-53777 erofs: kill hooked chains to avoid loops on deduplicated compressed images

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

6.2AI score0.00168EPSS
Exploits0References7
Rows per page
Query Builder