CVE-2025-3911 Exposure in Docker Desktop logs of environment variables configured for running containers

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

CVE-2025-3911

Docker Desktop before 4.41.0 logs environment variables configured for running containers in application logs, risking disclosure of sensitive credentials to anyone with log access. Affected product: Docker Desktop (Linux reportedly impacted in Nessus). Root cause: environment variables are recor...

CVE-2025-3911 Exposure in Docker Desktop logs of environment variables configured for running containers

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

Security Bulletin: Multiple vulnerabilities in multiple dependencies affect IBM MessageGateway/ MessageSight

Summary There are multiple vulnerabilities in Liberty, IBM Runtime Environment Java Version 8.0, Dojo and OpenSSL used by IBM MessageGateway/ MessageSight Vulnerability Details CVEID:CVE-2022-21365 DESCRIPTION: An unspecified vulnerability in Java SE related to the ImageIO component could allow a...

PT-2025-18192 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.41.0 Description: The issue concerns the recording of environment variables in Docker Desktop application logs, which could lead to unintentional disclosure of sensitive information such as API keys and...

Medium: libreoffice

Issue Overview: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that support...

CVE-2024-9771

The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Exploit for Unrestricted Upload of File with Dangerous Type in Boxbilling

CVE-2022-3552 In order to exploit the vulnerability in BoxBli...

Exploit for CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-2481...

[SECURITY] Fedora 41 Update: java-17-openjdk-portable-17.0.15.0.6-1.fc40

The OpenJDK 17 runtime environment - portable edition...

[SECURITY] Fedora 41 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc41

The OpenJDK 24 runtime environment...

[SECURITY] Fedora 41 Update: java-17-openjdk-17.0.15.0.6-1.fc41

The OpenJDK 17 runtime environment...

[SECURITY] Fedora 40 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc40

The OpenJDK 24 runtime environment...

[SECURITY] Fedora 40 Update: java-1.8.0-openjdk-1.8.0.452.b06-1.fc40

The OpenJDK 8 runtime environment...

[SECURITY] Fedora 42 Update: java-latest-openjdk-24.0.1.0.9-1.rolling.fc42

The OpenJDK 24 runtime environment...

CVE-2024-30114

Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...

CVE-2024-30147

Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications...

Malicious Package

Overview relative-ci-agent is a malicious package. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. The bin script in this package collects environment variables from process.env and sends the...

CVE-2025-29625

A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service DoS via an overly long environment variable passed to FileOpen function...