CVE-2025-61138

CVE-2025-61138 affects Qlik Sense Enterprise v14.212.13. The issue is an information leak via the '/dev-hub/' directory, exposing potentially sensitive data. The CVE metadata indicates a high-severity impact (CVSS v3.1: 7.5) with network attack vector and no user interaction required. Some connec...

Qlik Sense Enterprise 安全漏洞

Qlik Sense Enterprise is a data analytics platform from Qlik USA. A security vulnerability exists in Qlik Sense Enterprise version v14.212.13, which originates in the /dev-hub/ directory could lead to information disclosure...

Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub

Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.2.2 Vulnerability Details CVEID:CVE-2025-56200 DESCRIPTION: A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, whi...

Hackers Use KakaoTalk and Google Find Hub in Android Spyware Attack

North Korea-linked KONNI hackers used KakaoTalk and Google Find Hub to spy on victims and remotely wipe Android devices in a targeted phishing campaign...

CVE-2025-64681

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations...

CVE-2025-64683

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

CVE-2025-64682

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

MAL-2025-112503 Malicious code in llmboost-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 644589899c04664f0638a5eb5d08755b21fddf2d0772259d0f8859a65586be3b This package executes an obfuscated payload embedded within a license-checking module...

Malicious code in llmboost-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 644589899c04664f0638a5eb5d08755b21fddf2d0772259d0f8859a65586be3b This package executes an obfuscated payload embedded within a license-checking module...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:4006-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4006-1 advisory. This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to...

Konni Hackers Turn Google's Find Hub into a Remote Data-Wiping Weapon

The North Korea-affiliated threat actor known as Konni aka Earth Imp, Opal Sleet, Osmium, TA406, and Vedalia has been attributed to a new set of attacks targeting both Android and Windows devices for data theft and remote control. "Attackers impersonated psychological counselors and North Korean...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.8.0 release.

Red Hat Developer Hub 1.8.0 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

EUVD-2025-44054

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

CVE-2025-64683

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

CVE-2025-64682

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

CVE-2025-64683

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

CVE-2025-64682

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

CVE-2025-64681

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations...

CVE-2025-64681

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations...

CVE-2025-64683

CVE-2025-64683 affects JetBrains Hub, specifically versions prior to 2025.3.104432. The issue is an information disclosure via the Users API, as described in multiple connected sources (JetBrains Hub descriptions and Red Hat/EUVD entries). The disclosed information and exact impact details are fo...