CVE-2026-33515

Squid (web caching proxy) is affected by CVE-2026-33515 due to improper input validation in ICP message handling, leading to an out-of-bounds read that may disclose memory contents when responding to invalid ICP requests. The issue is limited to deployments with ICP enabled (icp_port non-zero) an...

CVE-2026-33515

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

Squid 安全漏洞

Squid is a set of open-source proxy servers and web caching servers developed by Squid. This software provides features such as caching the World Wide Web, filtering traffic, and proxy access. Versions of Squid prior to 7.5 contained security vulnerabilities, which were caused by improper input...

SUSE CVE-2026-33526

Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in keras-3.11.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-12060 DESCRIPTION: The keras.utils.getfile API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in WebSphere Application Server Liberty

Summary IBM Watson Discovery Cartridge affected by vulnerability in WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a...

PT-2026-28159

Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.5 Description Squid is a caching proxy for the Web. Versions prior to 7.5 are susceptible to a Denial of Service when handling ICP traffic due to premature resource release and heap Use-After-Free bugs. A remote...

PT-2026-28164

Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.5 Description Squid, a caching proxy for the Web, contains a flaw due to improper input validation when handling ICP traffic. This can lead to an out-of-bounds read, potentially exposing sensitive information to a...

CVE-2025-14837

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has bee...

ZZCMS 代码注入漏洞

ZZCMS is a content management system CMS from the China ZZCMS team. A code injection vulnerability exists in ZZCMS version 2025, which stems from incorrect manipulation of the parameter icp in the back-end site settings module file /admin/siteconfig.php, which may lead to code injection...

CVE-2025-14837

ZZCMS 2025 has a code injection vulnerability in the Backend Website Settings Module. The stripfxg function in /admin/siteconfig.php mishandles the icp argument, enabling remote code execution. Exploit has been publicly disclosed. Affected: ZZCMS 2025; file: /admin/siteconfig.php; function: strip...

CVE-2025-14837 ZZCMS Backend Website Settings siteconfig.php stripfxg code injection

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has bee...

CVE-2025-14837 ZZCMS Backend Website Settings siteconfig.php stripfxg code injection

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has bee...

PT-2025-51982

Name of the Vulnerable Software and Affected Versions ZZCMS version 2025 Description A code injection issue exists in ZZCMS 2025, specifically within the Backend Website Settings Module. The stripfxg function in the /admin/siteconfig.php file is affected. Manipulation of the icp argument can lead...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990454 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989620 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...

EUVD-2024-42873

Malicious code in bioql PyPI...

CVE-2024-48233

mipjz 5.0.5 is vulnerable to Cross Site Scripting XSS in \app\setting\controller\ApiAdminSetting.php via the ICP parameter...