com.vip.saturn:saturn-it (2.1.4) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.4)

com.vip.saturn:saturn-console MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.4 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-it (2.1.3) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.3)

com.vip.saturn:saturn-console MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.3 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-it (2.1.3-rc1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.3-rc1)

com.vip.saturn:saturn-console MAVEN version 2.1.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.3-rc1 Source cves: CVE-2025-29085 Source advisory:...

com.vip.saturn:saturn-it (2.1.2) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console (2.1.2)

com.vip.saturn:saturn-console MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vip.saturn:saturn-console and may be impacted: - com.vip.saturn:saturn-it 2.1.2 Source cves: CVE-2025-29085 Source advisory: OSV:GHSA-49V8-P6MM-3PFJ...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

GHSA-49V8-P6MM-3PFJ Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the zkClusterKey parameter, which is passed unescaped to an SQL query in executorCount. An attacker can execute arbitrary SQL commands by via the /console/dashboard/executorCount?zkClusterKey endpoint. Remediation Ther...

PT-2025-14546 · Vipshop · Saturn

Name of the Vulnerable Software and Affected Versions: vipshop Saturn versions 3.5.1 and earlier Description: The issue allows a remote attacker to execute arbitrary code. This can be achieved via the "/console/dashboard/executorCount" API endpoint, specifically by manipulating the zkClusterKey...

CVE-2025-0676: Improper Neutralization of Special Elements used in an OS Command

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

CVE-2025-29085: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

rp2remove_ports() Heap Buffer Overflow DoS

Vulnerability of the rp2removeports function in the drivers/tty/serial/rp2.c module – The Linux kernel’s TTY console support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

The threat actors behind the zero-day exploitation of a recently-patched security vulnerability in Microsoft Windows have been found to deliver two new backdoors called SilentPrism and DarkWisp. The activity has been attributed to a suspected Russian hacking group called Water Gamayun, which is...

CVE-2025-29266

Unraid 7.0.0 before 7.0.1 allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled...

PT-2025-13694 · Lime Technology · Unraid

Name of the Vulnerable Software and Affected Versions: Unraid versions 7.0.0 through 7.0.0 Description: The issue allows remote users to access the Unraid WebGUI and web console as root without authentication if a container is running in Host networking mode with Use Tailscale enabled. This can...

SUSE CVE-2024-7631

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

CVE-2025-2901

Rejected reason: This vulnerability is redundant to CVE-2025-23366 and CVE-2024-10234...

CVE-2025-2901

...

CVE-2025-2901

CVE-2025-2901 is rejected/not used and does not represent an active vulnerability entry.

SUSE CVE-2023-52973

In the Linux kernel, the following vulnerability has been resolved: vcscreen: move load of struct vcdata pointer in vcsread to avoid UAF After a call to consoleunlock in vcsread the vcdata struct can be freed by vcdeallocate. Because of that, the struct vcdata pointer load must be done at the top...

A Deep Dive into Water Gamayun’s Arsenal and Infrastructure

Trend Research discusses the delivery methods, custom payloads, and techniques used by Water Gamayun, the suspected Russian threat actor abusing a zero-day vulnerability in the Microsoft Management Console framework CVE-2025-26633 to execute malicious code on infected machines...