38305 matches found
CVE-2025-55207
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207
Astro CVE-2025-55207 describes an Open Redirect vulnerability in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone mode with trailingSlash set to "always", URLs like https://example.com//astro.build/press can redirect to //astro.build/press, en...
CVE-2025-55163
A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...
New NIST Concept Paper Outlines AI-Specific Cybersecurity Framework
NIST has released a concept paper for new control overlays to secure AI systems, built on the SP…...
Astro 输入验证错误漏洞
Astro is an Astro open source web framework for content-driven websites. An input validation error vulnerability exists in Astro versions prior to 9.4.1, which stems from a flaw in the redirection feature that could lead to an open redirection attack...
AegisBlock: a Privacy-Preserving Medical Research Framework Using Blockchain
Due to HIPAA and other privacy regulations, it is imperative to maintain patient privacy while conducting research on patient health records. In this paper, we propose AegisBlock, a patient-centric access controlled framework to share medical records with researchers such that the anonymity of th...
Linux Distros Unpatched Vulnerability : CVE-2022-23634
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a Ruby/Rack web server built for parallelism. Prior to puma version 5.6.2, puma may not always call close on the response body. Rails, prior to version...
OPENSUSE-SU-2025:15444-1 framework_tool-0.4.5-2.1 on GA media
These are all security issues fixed in the frameworktool-0.4.5-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-33494 · Astro · Astro
Name of the Vulnerable Software and Affected Versions: Astro versions prior to 9.4.1 Description: Astro is a web framework for content-driven websites. An open redirect vulnerability exists in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone...
New Malvertising Attack Spreads Crypto Stealing PS1Bot Malware
Cisco Talos researchers have discovered a dangerous new malware framework called PS1Bot. Active since early 2025, this sophisticated…...
Malicious code in membrane-astrophysics-fomalhaut-framework (npm)
The package membrane-astrophysics-fomalhaut-framework was found to contain malicious code...
Malicious code in framework-express-nebula-ionosphere (npm)
The package framework-express-nebula-ionosphere was found to contain malicious code...
Malicious code in wdc-automation-framework (npm)
The package wdc-automation-framework was found to contain malicious code...
Malicious code in esolutions-ui-framework (npm)
The package esolutions-ui-framework was found to contain malicious code...
Malicious code in data-solutions-framework-on-aws (npm)
The package data-solutions-framework-on-aws was found to contain malicious code...
Malicious code in stream-uglify-js-aldebaran-framework (npm)
The package stream-uglify-js-aldebaran-framework was found to contain malicious code...
Malicious code in fornax-blitz-nuxtjs-spica (npm)
The package fornax-blitz-nuxtjs-spica was found to contain malicious code...