458 matches found
CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
PT-2025-47304
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A missing authentication enforcement issue exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services. Improper validation of client certificate–based...
BIT-PARSE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0, Parse...
Intel PresentMon 安全漏洞
Intel PresentMon is a tool from Intel Corporation USA. It is used to capture and analyze ETW events related to exchange chain presentations on Windows. A security vulnerability exists in Intel PresentMon versions prior to 2.3.1 that stems from improperly set default permissions, which could lead ...
CVE-2025-64348
CVE-2025-64348 affects ELOG (ELOG
FreeBSD : ISC KEA -- Invalid characters cause assert (55c4e822-b4e4-11f0-8438-001b217e4ee5)
"The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 55c4e822-b4e4-11f0-8438-001b217e4ee5 advisory. Internet Systems Consortium, Inc. reports: To trigger the issue, three configuration parameters must...
Linux Distros Unpatched Vulnerability : CVE-2025-11232
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - To trigger the issue, three configuration parameters must have specific settings: hostname-char-set must be left at the default setting, which is ^A-Za-z0-9.-;...
CVE-2025-11232 Invalid characters cause assert
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "^A-Za-z0-9.-"; "hostname-char-replacement" must be empty the default; and "ddns-qualifying-suffix" must NOT be empty the default is empty. DDNS...
CVE-2025-11232 Invalid characters cause assert
To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "^A-Za-z0-9.-"; "hostname-char-replacement" must be empty the default; and "ddns-qualifying-suffix" must NOT be empty the default is empty. DDNS...
ISC KEA -- Invalid characters cause assert
Internet Systems Consortium, Inc. reports: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "^A-Za-z0-9.-"; "hostname-char-replacement" must be empty the default; and "ddns-qualifying-suffix" must N...
Improper Access Control
Liferay Portal is vulnerable to Improper Access Control. The vulnerability is due to the default membership type being set to “Open” due to newly created sites allowing any registered user to become a member, enabling remote attackers who join the site to view, add, or edit content...
EUVD-2019-16209
Malware in sbrugna...
EUVD-2018-20323
Malware in sbrugna...
EUVD-2016-9084
Malware in sbrugna...
EUVD-2017-18453
Malware in sbrugna...
EUVD-2003-1336
Malware in sbrugna...
EUVD-2021-10150
Malware in sbrugna...
EUVD-2003-0973
Malware in sbrugna...