10089 matches found
CVE-2026-25903 Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required to add the annotated component to...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows a intruder to disclose protected information.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through specially crafted queries...
CVE-2026-25903: Missing Authorization
Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required to add the annotated component to...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows a intruder to execute arbitrary codes.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows attackers to carry out phishing attacks.
The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks from a remote location...
ROS-20260216-73-0037
A vulnerability in the AWT and JavaFX components of the Oracle Java SE software platform, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is associated with insufficient protection of proprietary data. Exploitation of the vulnerability could allow an attacker acting...
WordPress plugin Element Pack Addons for Elementor 路径遍历漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...
Nikto Web Scanner 2.6.0
Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including thousands of potentially dangerous files/programs, checks for outdated versions of over 1500 server components, and version specific problems on hundreds of servers...
Arduino App Lab 操作系统命令注入漏洞
Arduino App Lab is an integrated development environment for developing Arduino applications, based on the open-source Arduino framework. Versions of Arduino App Lab prior to 0.4.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from insufficien...
SUSE SLES15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2026:0417-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0417-1 advisory. - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audinprocessformats bsc1256718. - CVE-2026-22854:...
GHSA-H355-32PF-P2XM vulnerabilities
Vulnerabilities for packages: maru, crossplane-provider-aws-route53, atlantis, amass, cloud-provider-vsphere, gh, langfuse, external-secrets-operator, crossplane-provider-azure-managedidentity, migrate, gitleaks, telegraf, tailscale, timoni, pguser, litestream, cerbos, spegel, containerd, witness...
Exploit for Deserialization of Untrusted Data in Facebook React
Affected Software: React Server Components versions 19.0.0, 1...
RLSA-2026:2220 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7,...
📄 Next.js 15 Remote Code Execution
A PHP-based proof of concept implementation demonstrating the critical remote code execution vulnerability in React Server Components RSC Flight protocol, affecting React and Next.js applications...
The vulnerabilities of Node.js’s HTTP components, which allow attackers to trigger service failures
The vulnerability of Node.js’s HTTP components is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
RHEL 10 : thunderbird (RHSA-2026:2286)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:2286 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component...
Malicious Package
Overview @rdxportal/ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @rdxportal/ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6715dad49a0781dc55e72ae77bd13276de1564d08cfd1c0a3c3aebf37b72acc The package @rdxportal/ui-components was found to contain malicious code. Source: ghsa-malware...
MAL-2026-796 Malicious code in @rdxportal/ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6715dad49a0781dc55e72ae77bd13276de1564d08cfd1c0a3c3aebf37b72acc The package @rdxportal/ui-components was found to contain malicious code. Source: ghsa-malware...