CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.

...

AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform...

Console Connection to Veeam Software Appliance Unstable When IPv6 is Disabled

Challenge When IPv6 has been disabled in the Veeam Host Management Console settings, actions within the Veeam Backup & Replication Console on a remote machine may be slow to initiate or fail if IPv6 has not also been disabled in the Console settings. Cause This issue occurs when the IPv6...

Linux Distros Unpatched Vulnerability : CVE-2022-35278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML i...

SAP BusinessObjects BI Platform Central Management Console Information Disclosure

The vulnerability in the web-based administration tool for SAP BusinessObjects BI Platform Central Management Console is related to the manipulation of queries on the server side. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

MAL-2025-46899 Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

Linux TTY Console DoS

Vulnerability of the vccprobe function in the drivers/tty/vcc.c module – The Linux kernel’s TTY console support driver is vulnerable due to a pointer issue related to NULL pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Malicious code in network-console-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41584 Malicious code in network-console-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41454 Malicious code in @revizor/reporter-console (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2020-13947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache...

admin-console 安全漏洞

admin-console is an Agora core view management interface from Sequent open source. A security vulnerability exists in admin-console versions v1.2.0 through v1.6.7, which stems from improper handling of the /sys-api/role/update interface, which could lead to an SQL injection attack...

Malicious code in cal-pretty-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b610f09a6268f2b584d18668b4311c4550b6cdbe798b386f161647b6b45299a8 The OpenSSF Package Analysis project identified 'cal-pretty-console' @ 10.13.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-41422 Malicious code in cal-pretty-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b610f09a6268f2b584d18668b4311c4550b6cdbe798b386f161647b6b45299a8 The OpenSSF Package Analysis project identified 'cal-pretty-console' @ 10.13.0 npm as malicious. It is considered malicious because: - The packa...

ROS-20250826-06

Vulnerability of SetQuantumFormat function of ImageMagick console graphic editor is related to incorrect calculation of buffer size when processing received packets. calculation of buffer size when processing received packets. Exploitation of the vulnerability may allow an attacker to cause a...

Incorrect authorization for traces request/download in CMC before 25.1.0

Summary An access control vulnerability was discovered in the Request Trace and Download Trace functionalities due to a specific access restriction not being properly enforced for users with limited privileges. Impact An authenticated user with limited privileges can request and download trace...

Linux Distros Unpatched Vulnerability : CVE-2016-6810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...