108663 matches found
EUVD-2020-27971
Malware in sbrugna...
WordPress plugin Featured Image from URL 跨站脚本漏洞
WordPress Featured Image from URL plugin is a plugin for solving WordPress website featured image FeaturedImage related problems. The WordPress Featured Image from URL plugin suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of custom...
Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680639)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680639 advisory. LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. Tenabl...
PT-2025-41166
Name of the Vulnerable Software and Affected Versions Dependency-Track versions prior to 4.13.5 Description Dependency-Track is a component analysis platform used for managing software supply chain risk. Versions prior to 4.13.5 may inadvertently transmit credentials intended for a private NuGet...
GHSA-HMGH-466J-FX4C Flowise vulnerable to RCE via Dynamic function constructor injection
Summary User-controlled input flows to an unsafe implementaion of a dynamic Function constructor , allowing a malicious actor to run JS code in the context of the host not sandboxed leading to RCE. Details When creating a new Custom MCP Chatflow in the platform, the MCP Server Config displays a...
Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework
Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...
CVE-2023-53579
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...
CVE-2023-53579 gpio: mvebu: fix irq domain leak
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...
CVE-2023-53579
CVE-2023-53579: In the Linux kernel, the gpio: mvebu driver had a resource leak in the irq domain triggered on driver detach. A fix was applied (using a custom devm action) to address the leak. Connected advisories (SUSE OSV entries, Root Debian patch notes, Astra Linux bulletin) corroborate the ...
RLSA-2025:7893 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Cross-site Scripting XSS in Grafana via Custom Frontend Plugins and Open Redirect CVE-2025-4123 grafana: Cross-site Scripting XSS in Grafana via Custom Frontend...
grafana security update
An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...
RockyLinux 10 : grafana (RLSA-2025:7892)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7892 advisory. grafana: Cross-site Scripting XSS in Grafana via Custom Frontend Plugins and Open Redirect CVE-2025-4123 Tenable has extracted the preceding description block...
PT-2025-40721
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the mvebu driver when the driver detaches. This leak was identified by Uwe Kleine-König and is addressed with a custom devm action. Recommendations At the momen...
EUVD-2025-9505
Malicious code in bioql PyPI...
EUVD-2024-50954
Malicious code in bioql PyPI...
EUVD-2024-1295
Malicious code in bioql PyPI...
EUVD-2024-0528
Malicious code in bioql PyPI...
EUVD-2023-52385
Malicious code in bioql PyPI...