11017 matches found
CVE-2025-11538 Keycloak-server: debug default bind address
A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...
CVE-2025-11538 Keycloak-server: debug default bind address
A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...
CVE-2025-11538
Keycloak is affected by CVE-2025-11538 in versions prior to 26.4.4 where enabling debug mode (--debug) binds the JDWP port to all interfaces (0.0.0.0), exposing the debug port on the local network. This potentially allows a local-network attacker to attach a remote debugger and achieve remote cod...
CVE-2025-11538
A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...
Security update for cargo-packaging, rust-bindgen
This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0. Patch...
SUSE-SU-2025:4091-1 Security update for cargo-packaging, rust-bindgen
This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber bsc1249012 Other fixes: - Prevent stripping debug info bsc1222175 rust-bindgen was updated to 0.72.0...
EUVD-2025-176588
Malicious code in route-permission-grep-quick-debug npm...
EUVD-2025-177885
Malicious code in meta-code-debug-key-old npm...
EUVD-2025-178599
Malicious code in hash-socket-slow-debug-interpret npm...
EUVD-2025-178227
Malicious code in kappa-debug-lambda-daemon-upsilon npm...
EUVD-2025-179384
Malicious code in debug-user-pipe-sun-simple npm...
EUVD-2025-177179
Malicious code in pi-permission-debug-decrypt-slow npm...
EUVD-2025-179388
Malicious code in debug-cache-report-cache-index npm...
EUVD-2025-175551
Malicious code in wind-psi-zeta-debug-zeta npm...
EUVD-2025-179372
Malicious code in decrypt-sun-mock-rain-debug npm...
EUVD-2025-179385
Malicious code in debug-tau-wind-gamma-sun npm...
Malicious code in debug-char-code-double-encode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176243
Malicious code in spy-sun-byte-debug-import npm...