1361 matches found
CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass
RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...
CVE-2025-68926 RustFS has a gRPC Hardcoded Token Authentication Bypass
RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC authentication using a hardcoded static token "rustfs rpc" that is publicly exposed in the source code repository, hardcoded on both client and server sides, non-configurable...
CVE-2025-14038
EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...
This Week in Spring – December 16th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it’s been! We’ve got around nine shopping days ’til Christmas, and the New Year is almost here! Things are moving so quickly and the Spring community is no exception! Let's dive into this week's wonderful...
CVE-2025-14038
EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...
CVE-2025-67780
SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 e.g., on Mini1prod2 allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation,...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: rancher-helm, k8sgpt, kubeflow, rancher-telemetry, snyk-cli, terraform-docs, frp, opentofu, kube-metrics-adapter, mountpoint-s3-csi-driver, nri-apache, k8ssandra-client, mongodb-kubernetes-operator, secrets-store-csi-driver-provider-azure, metrics-agent,...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: rancher-helm, k8sgpt, kubeflow, rancher-telemetry, snyk-cli, terraform-docs, frp, opentofu, kube-metrics-adapter, mountpoint-s3-csi-driver, nri-apache, k8ssandra-client, mongodb-kubernetes-operator, secrets-store-csi-driver-provider-azure, metrics-agent,...
Spring gRPC Next Steps for 1.0.0
This is a new blog post in the Road to GA series, this time updating everyone on the plans to integrate Spring gRPC with Spring Boot 4. The original plan was to move the autoconfiguration from Spring gRPC into Spring Boot in time for the 4.0 release. Unfortunately we haven't been able to find the...
EUVD-2018-9206
Malware in sbrugna...
EUVD-2017-12993
Malware in sbrugna...
EUVD-2021-18260
Malware in sbrugna...
EUVD-2017-16836
Malware in sbrugna...
EUVD-2017-16835
Malware in sbrugna...
EUVD-2021-1152
Malware in sbrugna...
EUVD-2021-15339
Malware in sbrugna...
EUVD-2017-18366
Malware in sbrugna...
EUVD-2017-15653
Malware in sbrugna...