3725 matches found
CVE-2025-21605
CVE-2025-21605 affects Redis where, in versions starting at 2.6 and before 7.4.3, an unauthenticated client can cause unlimited growth of the output buffer, exhausting memory and potentially crashing the server. The issue occurs because Redis’ default client-output-buffer-limit does not cap norma...
CVE-2025-21605 Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client
Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not limit the outpu...
redis,valkey -- DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client
Axel Mierczuk reports: By default, the Redis configuration does not limit the output buffer of normal clients see client-output-buffer-limit. Therefore, the output buffer can grow unlimitedly over time. As a result, the service is exhausted and the memory is unavailable. When password...
Towards Stateless Clients in Ethereum: Benchmarking Verkle Trees and Binary Merkle Trees with SNARKs
Ethereum, the leading platform for decentralized applications, faces challenges in maintaining decentralization due to the significant hardware requirements for validators to store Ethereum's entire state. To address this, the concept of stateless clients is under exploration, enabling validators...
Malicious code in @mlbtv-clients/isu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130a1ca20af439a3a3aac26f4a56391a47dfbfa51c48fa2883b404d415c64b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Local Data Quantity-Aware Weighted Averaging for Federated Learning with Dishonest Clients
Whitepaper called Local Data Quantity-Aware Weighted Averaging For Federated Learning With Dishonest Clients...
CVE-2025-32782 Ash Authentication email link auto-click account confirmation vulnerability
Ash Authentication provides authentication for the Ash framework. The confirmation flow for account creation currently uses a GET request triggered by clicking a link sent via email. Some email clients and security tools e.g., Outlook, virus scanners, and email previewers may automatically follow...
CVE-2025-32913 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header
A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...
GHSA-3633-G6MG-P6QQ SurrealDB memory exhaustion via string::replace using regex
An authenticated user can craft a query using the string::replace function that uses a Regex to perform a string replacement. As there is a failure to restrict the resulting string length, this enables an attacker to send a string::replace function to the SurrealDB server exhausting all the memor...
Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence
Law enforcement authorities have announced that they tracked down the customers of the SmokeLoader malware and detained at least five individuals. "In a coordinated series of actions, customers of the Smokeloader pay-per-install botnet, operated by the actor known as 'Superstar,' faced consequenc...
The vulnerability of the calloc function in the RESP Handler component of clients for interacting with HIREDIS databases allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the calloc function in the RESP Handler component of clients for interacting with the HIREDIS database is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause...
CVE-2025-31746
Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...
CVE-2025-31797
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldGrid Sprout Clients sprout-clients allows Stored XSS.This issue affects Sprout Clients: from n/a through = 3.2...
CVE-2025-31746
Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...
CVE-2025-31746
Technical details for CVE-2025-31746 (Think201 Clients plugin) are not provided in the supplied documents. No confirmed affected products, root cause, or remediation are disclosed here; monitor official advisories and feeds for updates.
CVE-2025-31746 WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...
CVE-2025-2784
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server...
PT-2025-14732 · Unknown · Think201 Clients
Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Think201 Clients...
WordPress plugin Think201 Clients 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
