9457 matches found
CVE-2025-47856: Improper Neutralization of Special Elements used in an OS Command
Two improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests...
DLA-4331-1 https-everywhere - security update
Bulletin has no description...
JLSEC-2025-27 curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...
CVE-2025-52632: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...
PT-2025-45997
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...
The server for managing Fortinet FortiClient Enterprise Management Server programs is vulnerable, due to insufficient checking of incoming requests. This vulnerability allows attackers to execute SSRF attacks.
The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server lies in the insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending a specially crafted HTTP or HTTPS request...
EUVD-2025-33278
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...
CVE-2025-36636
creationtimestamp| type| source ---|---|--- 2025-10-08 15:48:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115339328547767395...
EUVD-2010-4797
Malware in sbrugna...
EUVD-2017-1813
Malware in sbrugna...
EUVD-2013-3389
Malware in sbrugna...
EUVD-2018-11791
Malware in sbrugna...
EUVD-2021-21249
Malware in sbrugna...
EUVD-2013-4808
Malware in sbrugna...
EUVD-2021-21870
Malware in sbrugna...
EUVD-2002-2383
Malware in sbrugna...
EUVD-2018-15713
Malware in sbrugna...
EUVD-2000-0734
Malware in sbrugna...