12774 matches found
Spring Cloud Gateway Server Webflux 安全漏洞
Spring Cloud Gateway Server Webflux is a Spring open source gateway server. A security vulnerability exists in Spring Cloud Gateway Server Webflux that stems from the Spring Expression Language that may expose environment variables and system properties, potentially leading to information...
CVE-2025-61908: NULL Pointer Dereference
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a...
Icinga 2 安全漏洞
Icinga 2 is a monitoring system from Icinga open source. A security vulnerability exists in Icinga 2 2.15.0 and earlier versions, which stems from a filter expression that can access unauthorized variables or objects, potentially leading to information disclosure...
CVE-2025-61581: Inefficient Regular Expression Complexity
UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...
PT-2025-42512
Name of the Vulnerable Software and Affected Versions Icinga 2 versions 2.10.0 through 2.15.0 Icinga 2 version 2.13.12 and earlier Icinga 2 version 2.14.6 and earlier Description Icinga 2, an open source monitoring system, is susceptible to a denial-of-service condition. Creating an invalid...
Regular Expression Denial Of Service (ReDoS)
Cattown is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to the use of inefficient regular expressions with potentially exponential backtracking complexity, which allows an attacker to craft malicious markdown inputs that cause excessive CPU usage and lead to...
Expression Language Injection
Overview Affected versions of this package are vulnerable to Expression Language Injection in route definitions. An attacker with permission to define routes can expose the server's file structure or other sensitive environment variables by crafting a SpEL expression to access sensitive system...
Regular Expression Denial of Service (ReDoS)
Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the parsing of the If-Match and If-None-Match headers when the ETag method is used in response construction. An attacker can cause excessive resource consumption by sending specially crafted...
PT-2025-41615
Name of the Vulnerable Software and Affected Versions cel-rust versions 0.10.0 through 0.11.3 Description cel-rust is a Common Expression Language interpreter written in Rust. Parsing specific, malformed Common Expression Language CEL expressions can cause the parser to terminate unexpectedly. If...
Common Expression Language 输入验证错误漏洞
Common Expression Language is a common expression language interpreter written in Rust by cel-rust open source. An input validation error vulnerability exists in Common Expression Language version 0.10.0 through versions prior to 0.11.4, which stems from the fact that parsing a specific incorrect...
rexml: REXML: Denial of Service via inefficient regex parsing
A flaw was found in REXML. A remote attacker could exploit inefficient regular expression regex parsing when processing hex numeric character references &x...; in XML documents. This could lead to a Regular Expression Denial of Service ReDoS, impacting the availability of the affected component...
PCRE2 Heap Buffer Overflow Info Disclosure
The vulnerability of the PCRE2 regular expression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
EUVD-2020-24106
Malware in sbrugna...
EUVD-2005-0604
Malware in sbrugna...
EUVD-2006-1909
Malware in sbrugna...
EUVD-2020-0958
Malware in sbrugna...
EUVD-2021-0025
Malware in sbrugna...
EUVD-2009-5109
Malware in sbrugna...