PT-2025-8700 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurred due to a check failure. The crash state includes CheckUnwind, ndpi free flow data, and is located in the fuzz process packet.c file. Recommendations: At the moment, there is...

OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...

PT-2025-7665 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: ndpi free flow data, ndpi flow free, and process ndpi...

PT-2025-5670 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to a segmentation fault on an unknown address. The crash occurred in the ndpi free flow data function, which is located in the...

Authentication flaw

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vaadin-flow-sockjs (>=23.1.0, <=23.1.1) +258 more potentially affected by CVE-2023-25499 via com.vaadin:flow-server (>=23.0.0, <=23.3.10)

com.vaadin:flow-server MAVEN version =23.0.0, =1.1.3, =23.1.0, =23.1.0, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =1.0.0-alpha1, =5.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.0.0, =23.3.10 and more Source cves: CVE-2023-25499 Source advisory: GHSA-5F9V-MV5G-JH5Q...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.1, <=1.1.2), com.beirtipol:jfixtools-reporting (1.0-beta) +129 more potentially affected by CVE-2023-25500 via com.vaadin:flow-server (>=3.0.0, <=9.1.1)

com.vaadin:flow-server MAVEN version =3.0.0, =1.0.1, =1.1.6, =15.0.0, =15.0.0, =3.2.3, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =9.1.1 and more Source cves: CVE-2023-25500 Source advisory: GHSA-CH48-9R3Q-PV7X...

About Anomalous Data Transfer detection in InsightIDR

By Shivangi Pandey Shivangi is a Senior Product Manager for D&R at Rapid7. Data exfiltration is an unauthorized movement or transfer of data occurring on an organization’s network. This can occur when a malicious actor gains access to a corporation’s network with the intention of stealing or...

PT-2022-37173 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as ndpi free flow data, ndpi flow fre...

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability...

Privilege escalation

Task Flow Data Engine Elevation of Privilege Vulnerability...

CVE-2022-21861 Task Flow Data Engine Elevation of Privilege Vulnerability

...

PT-2022-15171 · Unknown +1 · Task Flow Data Engine +1

Name of the Vulnerable Software and Affected Versions: Task Flow Data Engine affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

CVE-2022-21861: Undefined Security Weakness

Task Flow Data Engine Elevation of Privilege Vulnerability...

com.alibaba.rsocket:alibaba-broker-server (1.0.1), com.beirtipol:jfixtools-reporting (1.0-beta) +110 more potentially affected by unknown CVE via com.vaadin:flow-server (>=3.0.0, <=6.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =6.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C57F-4VP2-JQHM...

IBM QRadar SIEM Hardcoded Credentials Vulnerability

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. A hard-coded credentials vulnerability exists in IBM QRadar SIEM versions 7.3 an...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: MEND:CVE-2021-31404...

com.vaadin:flow (>=3.0.0, <=3.0.5), com.vaadin:flow-client (>=3.0.0, <=3.0.5) +87 more potentially affected by CVE-2020-36319 via com.vaadin:flow-server (>=3.0.0, <=3.0.5)

com.vaadin:flow-server MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =15.0.0, =15.0.4 - com.vaadin:vaadin-accordion-flow 3.0.0 - com.vaadin:vaadin-accordion-flow-demo 3.0.0 and more Source cves: CVE-2020-36319 Source advisory: OSV:GHSA-RJWW-2X8V-M9V...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +101 more potentially affected by CVE-2020-36321 via com.vaadin:flow-server (>=3.0.0, <=4.0.8)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.8 and more Source cves: CVE-2020-36321 Source advisory: GHSA-49R2-73M6-PP8F...

com.beirtipol:jfixtools-reporting (1.0-beta), com.beirtipol:jfixtools-ui-vaadin (1.0-beta) +107 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=3.0.0, <=5.0.2)

com.vaadin:flow-server MAVEN version =3.0.0, =1.1.6, =15.0.0, =15.0.0, =0.17.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.0.0, =5.0.2 and more Source cves: CVE-2021-31404 Source advisory: GHSA-XWG3-QRCG-W9X6...