curl: Arbitrary free in curl's config file parsing.

Summary: arbitrary free leading to possible double-free / use-after-free / memory corruption, depending on the program and the ability of what a we can do after freeing the pointer we control. Statement clarifying if an AI was used to find the issue or generate the report: Yes I used AI to list...

Exploit for CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator true,...

TencentOS Server 4: kafka (TSSA-2024:1081)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1081 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: libeconf (TSSA-2025:0087)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0087 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

org.apache.causeway.core:causeway-core-config (2.0.0-rc3), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc3) +111 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc3)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc3 -...

org.apache.causeway.core:causeway-core-config (2.0.0-rc2), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc2) +110 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc2)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc2 -...

org.apache.causeway.core:causeway-core-config (2.0.0), org.apache.causeway.core:causeway-core-interaction (2.0.0) +118 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0 -...

org.apache.causeway.core:causeway-core-interaction (>=4.0.0-m1, <=4.0.0-m2), org.apache.causeway.core:causeway-core-metamodel (>=4.0.0-m1, <=4.0.0-m2) +93 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-core-config (>=4.0.0-m1, <=4.0.0-m2)

org.apache.causeway.core:causeway-core-config MAVEN version =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m2 - org.apache.causew...

dev.savantly.nexus:agents-module (3.4.0), dev.savantly.nexus:flow-module (3.4.0) +135 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-core-config (>=2.0.0-rc1, <=3.4.0)

org.apache.causeway.core:causeway-core-config MAVEN version =2.0.0-rc1, =3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-core-config and may be impacted: - dev.savantly.nexus:agents-module 3.4.0 -...

CVE-2025-63225

The Eurolab ELTS100UBX device firmware version ELTS100v1.UBX is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized...

EUVD-2025-198068

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

CVE-2025-63225

The Eurolab ELTS100UBX device firmware version ELTS100v1.UBX is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized...

PT-2026-2620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s DRM Xe driver contains a use-after-free issue within the OA configuration interface, specifically in the xe oa add config ioctl function. The issue arises from accessi...

CVE-2025-56499: Improper Access Control

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

PT-2025-47393

Name of the Vulnerable Software and Affected Versions mihomo version 1.19.11 Description An access control issue exists in mihomo version 1.19.11. Authenticated attackers with limited privileges can read arbitrary files with higher privileges. This is achieved by obtaining an external control key...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

Kubernetes: Node Detection

Detection of the Kubernetes node type SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.137000";...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...