24339 matches found
continuwuity 安全漏洞
Continuwity is an open-source family server developed by Continuwity. There is a security vulnerability in Continuwity, which arises when users leave a room, join another room, or make a knock sound. In such cases, the victim’s server may sign any event provided by the remote server...
CVE-2022-50942
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
UBUNTU-CVE-2022-50942
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
EUVD-2022-55948
Inciga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijackin...
CVE-2022-50942
Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...
SUSE CVE-2026-23039
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drmatomichelperdisableall is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every displ...
PT-2026-5569
Inciga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijackin...
[SECURITY] Fedora 43 Update: nodejs20-20.20.0-2.fc43
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
[SECURITY] Fedora 43 Update: nodejs22-22.22.0-2.fc43
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
[SECURITY] Fedora 42 Update: nodejs20-20.20.0-2.fc42
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
CVE-2025-71180
In the Linux kernel, the following vulnerability has been resolved: counter: interrupt-cnt: Drop IRQFNOTHREAD flag An IRQ handler can either be IRQFNOTHREAD or acquire spinlockt, as CONFIGPROVERAWLOCKNESTING warns: ============================= BUG: Invalid wait context 6.18.0-rc1+git... 1...
GHSA-28QQ-5F47-R5X2
creationtimestamp| type| source ---|---|--- 2026-01-30 19:05:02+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115985606322071908...
CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
GHSA-5264-M964-7PG9
creationtimestamp| type| source ---|---|--- 2026-01-30 16:30:50+00:00| seen| https://gist.github.com/alon710/dada607d9cf26924b64f5cc8b7be9433...
CLEANSTART-2026-RX06615 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...
WordPress EventON Lite< 2.2.9 - Unauthenticated Virtual Event Settings Update vulnerability
Unauthenticated Virtual Event Settings Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin EventON versions 2.2.9...
CVE-2026-1599
creationtimestamp| type| source ---|---|--- 2026-01-29 20:51:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlo4rulwa2n...
CVE-2026-1598
creationtimestamp| type| source ---|---|--- 2026-01-29 20:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlnkuyrqt2n...
CVE-2026-1340
creationtimestamp| type| source ---|---|--- 2026-01-29 19:59:40+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-068 2026-01-29 20:52:01+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-03 2026-01-29 21:21:07+00:00| seen|...