WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, podman, nvidia-container-toolkit, node-feature-discovery, buildah, falco-no-driver, grafana-alloy, k3s...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, podman, nvidia-container-toolkit, node-feature-discovery, buildah, falco-no-driver, grafana-alloy, k3s...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, podman, nvidia-container-toolkit, node-feature-discovery, buildah, falco-no-driver, grafana-alloy, k3s...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, podman, nvidia-container-toolkit, node-feature-discovery, buildah, falco-no-driver, grafana-alloy, k3s...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: podman, nvidia-container-toolkit, kots, buildah, spegel, syft, grype, containerd, undock, kubernetes-csi-driver-nfs, node-feature-discovery, wolfictl, skaffold, kubescape, zot, k8s-device-plugin, grafana-alloy, skopeo, trivy, k3s, nerdctl, kubernetes, xeol, dagger,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: undock, azure-container-networking, sriov-network-device-plugin, kots, spegel, neuvector-scanner, kubernetes-fips, spegel-fips, grype, ctop, k3s, syft-fips, kubernetes, rancher-agent, newrelic-infrastructure-agent, prometheus-node-exporter, docker-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: rke2-runtime, virt-handler, azure-container-networking, node-feature-discovery, sriov-network-device-plugin, virt-launcher, prometheus-podman-exporter, cluster-autoscaler-fips, kubernetes-fips, virt-handler-fips, nvidia-container-toolkit, grafana-alloy-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: rke2-runtime, azure-container-networking, node-feature-discovery, sriov-network-device-plugin, prometheus-podman-exporter, cluster-autoscaler-fips, kubernetes-fips, nvidia-container-toolkit, grafana-alloy-fips, eks-distro-fips, k3s, podman, kubernetes, rancher-agent,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: rke2-runtime, virt-handler, azure-container-networking, node-feature-discovery, sriov-network-device-plugin, virt-launcher, prometheus-podman-exporter, cluster-autoscaler-fips, kubernetes-fips, virt-handler-fips, nvidia-container-toolkit, grafana-alloy-fips,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: undock, azure-container-networking, sriov-network-device-plugin, kots, spegel, neuvector-scanner, kubernetes-fips, spegel-fips, grype, ctop, k3s, syft-fips, kubernetes, rancher-agent, newrelic-infrastructure-agent, prometheus-node-exporter, docker-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: rke2-runtime, azure-container-networking, node-feature-discovery, sriov-network-device-plugin, prometheus-podman-exporter, cluster-autoscaler-fips, kubernetes-fips, nvidia-container-toolkit, grafana-alloy-fips, eks-distro-fips, k3s, podman, kubernetes, rancher-agent,...

nuclei-templates

This repository is an offensive tool for vulnerability scanning and exploitation, specifically for the nuclei engine. It contains a community-curated list of templates for discovering security vulnerabilities in applications. The templates are used by the nuclei scanner to power the actual scanni...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

CVE-2025-64171

A cross-namespace authorization flaw has been identified in the MARIN3R operator’s DiscoveryServiceCertificate resource. The flaw occurs because the operator mistakenly treats certain inputs as valid, bypassing Kubernetes Role-Based Access Control RBAC. When a user has permission to create...

CVE-2025-64327 ThinkDashboard: Blind Server-Side Request Forgery (SSRF) vulnerability in /api/ping Endpoint

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Versions 0.6.7 and below contain a Blind Server-Side Request Forgery SSRF vulnerability, in its /api/ping?url= endpoint. This allows an attacker to make arbitrary requests to internal or external hosts. This...

CVE-2025-64327

CVE-2025-64327 affects ThinkDashboard (Go + JavaScript) and is caused by a blind SSRF in the /api/ping?url= endpoint in versions 0.6.7 and earlier. An attacker can cause the application to perform arbitrary requests to internal or external hosts, potentially revealing local network topology and o...

EUVD-2025-38186

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Versions 0.6.7 and below contain a Blind Server-Side Request Forgery SSRF vulnerability, in its /api/ping?url= endpoint. This allows an attacker to make arbitrary requests to internal or external hosts. This...

EUVD-2025-38150

An issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...