6602 matches found
GO-2025-3459 Remote code execution in Wazuh server in github.com/wazuh/wazuh
Remote code execution in Wazuh server in github.com/wazuh/wazuh...
GO-2025-3495 MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio
MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
GO-2025-3466 Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping
Missing rate limit in MaysWind ezBookkeeping in github.com/mayswind/ezbookkeeping...
GO-2025-3479 lakeFS allows an authenticated user to cause a crash by exhausting server memory in github.com/treeverse/lakefs
lakeFS allows an authenticated user to cause a crash by exhausting server memory in github.com/treeverse/lakefs...
GO-2025-3483 Mattermost allows reading arbitrary files in github.com/mattermost/mattermost-server
Mattermost allows reading arbitrary files in github.com/mattermost/mattermost-server...
GO-2025-3474 MaysWind ezBookkeeping has Improper Privilege Management in github.com/mayswind/ezbookkeeping
MaysWind ezBookkeeping has Improper Privilege Management in github.com/mayswind/ezbookkeeping...
CVE-2025-1595
creationtimestamp| type| source ---|---|--- 2025-02-23 22:23:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5104 2025-02-24 02:04:28+00:00| seen| https://t.me/cvedetector/18767 2025-02-24 14:08:41+00:00| seen| Telegram/ix8r2tp3DRmpslsXrpXpnniJ8xqmY1Z9fZ2a75kItDIoKB...
GHSA-FH4V-V779-4G2W SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
CVE-2021-4143
Cross-site Scripting XSS - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0...
CVE-2022-3608
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha...
CVE-2022-3167
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1...
CVE-2022-3945
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-3765
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
CVE-2022-3389
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...
CVE-2022-3525
Deserialization of Untrusted Data in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3552
Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1...
CVE-2022-3174
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3268
Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2...