632 matches found
CVE-2025-22874 vulnerabilities
Vulnerabilities for packages: nri-prometheus, local-static-provisioner, amazon-cloudwatch-agent, kubernetes-dns-node-cache, doppler-kubernetes-operator, oauth2-proxy, go-bindata, nri-kafka, kubernetes-dashboard, portieris, apko, influx, spiffe-helper, frp, nri-haproxy, cloud-provider-aws, ollama,...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.18 Bug Fix Update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.14.18 on Red Hat Enterprise Linux 9 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...
The vulnerability of the CloudSrvUserdataVersionCheck() function in TOTOLINK CA600-PoE router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA600-PoE router’s software lies in the lack of measures taken at the control level during the processing of the Version parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending...
CVE-2023-26316
A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javascript protocol to be loaded and can be exploited by attackers to steal Xiaomi cloud service account's cookies...
CVE-2018-7580
Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub" will stop operating and be frozen until the flood stops. During the flood, the user won't be able to turn on/off the lights, and all of...
CVE-2019-0322
SAP Commerce Cloud previously known as SAP Hybris Commerce, HYCOM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2025-44841
TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
ASUS AiCloud Improper Authentication Control Vulnerability
AiCloud is a cloud service from ASUS, designed to provide easy access to the data inside the router's back-up devices such as USBs or PCs, as well as uploading, downloading, playing music online, browsing documents online, sharing links to Facebook, and setting up Smart Sync to synchronize with t...
ASUS AiCloud 安全漏洞
AiCloud is a cloud service from ASUS, designed to provide easy access to the data inside the router's back-up devices such as USBs or PCs, as well as uploading, downloading, playing music online, browsing documents online, sharing links to Facebook, and setting up Smart Sync to synchronize with t...
PT-2025-18652 · Totolink · Totolink Cpe Cp900
Name of the Vulnerable Software and Affected Versions: TOTOLINK CPE CP900 version 6.3c.1144 B20190715 Description: A command injection issue was found in the CloudSrvUserdataVersionCheck function, allowing attackers to execute arbitrary commands via a crafted request. This is possible through the...
CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated wit...
PT-2025-11993 · Meta · Whatsapp
Name of the Vulnerable Software and Affected Versions: WhatsApp cloud service affected versions not specified Description: The issue concerns the WhatsApp cloud service, which did not block certain crafted PDF content. This crafted content can defeat a sandbox protection mechanism, allowing remot...
CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated wit...
CVE-2025-30259
Summary: CVE-2025-30259 concerns the WhatsApp cloud service before late 2024, where crafted PDF content could defeat a sandbox protection mechanism and permit remote access to messaging apps by third parties, an issue reportedly exploited in the wild in 2024 for Android malware (BIGPRETZEL). Affe...
CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated wit...
Vasion Print 安全漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.913 and Application 20.0.2253, which stems from a risk of cross-tenant password disclosure...
Vasion Print 代码注入漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from a client-side remote code execution issue...
Vasion Print 访问控制错误漏洞
Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from allowing unauthenticated driver package editing...
Malicious code in time-server-analysis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5f796bcefeb9b8d3af4bde36c54545d77afdcd6b63284ae58b0a6078b0bbb561 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
