ROS-20260921-73-0083

The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20260908-73-0066

The vulnerability in nvidia-kmod relates to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

SIMATIC S7 PLC Web Server XSS

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Your Space Is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs

AI-powered Applications AI-Apps, hosted on platforms such as Hugging Face, are democratizing access to pre-trained models through online inference and fine-tuning services. While lowering AI adoption barriers, these platforms introduce an unexplored attack surface, as AI-Apps are often developed ...

EUVD-2026-38089

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-30805

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

Insecure Default Initialization of Resource

Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to DNS rebinding protection being disabled by default in HTTP-based servers using StreamableHTTPHandler or SSEHandler. An attacker can access internal resources or invoke tools exposed by...

CVE-2026-24148

Affected product: NVIDIA Jetson platforms running JetPack/JETSON Linux. The vulnerability resides in the system initialization logic, allowing an unprivileged attacker to initialize a resource with an insecure default. Consequences stated include information disclosure of encrypted data, data tam...

PT-2026-29291

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson for JetPack affected versions not specified Description An unprivileged attacker could cause a resource to initialize with an insecure default due to a flaw in the system initialization logic. A successful exploit may lead to...

CVE-2026-2617

CVE-2026-2617 affects Beetel 777VR1 up to version 01.00.09, with a vulnerability in the Telnet Service/SSH Service causing insecure default initialization of a resource. Impact details in the connected sources indicate the issue is exploitable from the local network, and exploitation has been pub...

Spring Boot Actuator Data Compromise

The vulnerability of the Spring Boot Actuator component in the corporate security solution for message exchange via TeleMessage TM SGNL is related to the insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to insecure resource initialization. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Wago Device Sphere Insecure Initialization

The vulnerability of the software solutions for centralized control of Wago Device Sphere controllers is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain full access to the tool and all connected devices...

VMware Aria Operations Monitoring Tool Information Disclosure

The vulnerability of the monitoring tool for VMware Aria Operations relates to the insecure initialization of resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Rockwell Automation ControlLogix Ethernet Module RCE

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

GHSA-794X-8X6X-QPFC Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Mbed TLS Function Unauthenticated Access

The vulnerability of the mbedtlssslsethostname function in Mbed TLS software is related to insecure resource initialization. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Zoom Workplace Insecure Resource Initialization

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to an insecure initialization of resources. Exploiting this vulnerability could allow an attacker to influence the integrity of protected information...

Arbitrary Command Injection

Overview @cdklabs/cdk-proserve-lib is an AWS CDK library containing constructs, aspects, and patterns. Affected versions of this package are vulnerable to Arbitrary Command Injection due to forgetting to export the new Aspect. An attacker can compromise insecure resource policy settings,...