4039 matches found
CVE-2025-58746 Volkov Labs Business Links plugin vulnerable to privilege escalation attack
The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashboards, time pickers, and dropdown menus. Prior to version 2.4.0, a malicious actor with Editor privileges can escalate their privileges to Administrator and perform arbitrary...
CVE-2025-58746 Volkov Labs Business Links plugin vulnerable to privilege escalation attack
The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashboards, time pickers, and dropdown menus. Prior to version 2.4.0, a malicious actor with Editor privileges can escalate their privileges to Administrator and perform arbitrary...
CVE-2025-58746
The CVE-2025-58746 issue affects the Volkov Labs Business Links panel for Grafana, where prior to version 2.4.0 an Editor can escalate to Administrator due to arbitrary JavaScript code injection in the Layout → Link → URL field. The vulnerability enables arbitrary administrative actions on affect...
Business Links Panel for Grafana 安全漏洞
Business Links Panel for Grafana is an open source business dashboard panel software from Volkov Labs. A security vulnerability exists in Business Links Panel for Grafana prior to version 2.4.0, which stems from an elevation of privilege that allows a malicious participant with Editor privileges ...
PT-2025-36525
Name of the Vulnerable Software and Affected Versions: Volkov Labs Business Links panel for Grafana versions prior to 2.4.0 Description: The Volkov Labs Business Links panel for Grafana allows navigation using external links, internal dashboards, time pickers, and dropdown menus. Prior to version...
Exploit for Unprotected Alternate Channel in Crushftp
CVE-2025-54309Enhancedexploit This is a enhanced version o...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...
MAL-2025-43005 Malicious code in @zalastax/nolb-_functions-io-labs-perfor (npm)
The package @zalastax/nolb-functions-io-labs-perfor was found to contain malicious code...
Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm)
The package @zalastax/nolb-functions-io-labs-perfo was found to contain malicious code...
MAL-2025-43004 Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm)
The package @zalastax/nolb-functions-io-labs-perfo was found to contain malicious code...
Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X
Researchers at Guardio Labs have uncovered a new "Grokking" scam where attackers trick Grok AI into spreading malicious…...
PT-2025-35754
Name of the Vulnerable Software and Affected Versions: Amuse Labs PuzzleMe for WordPress versions through 1.2.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Puzzle...
Cockroach Labs cockroach-k8s-request-cert 安全漏洞
Cockroach Labs cockroach-k8s-request-cert is a container image from Cockroach Labs, Inc. A security vulnerability exists in Cockroach Labs cockroach-k8s-request-cert, which stems from an empty root password setting and could lead to authentication bypass...
Linux Distros Unpatched Vulnerability : CVE-2019-13207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate function in dname.c. CVE-2019-13207 Note that Nessus relies on t...
PT-2025-35314
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM versions 9.0 through 9.3, 10.0 through 10.4 Sitecore Experience Platform XP versions 9.0 through 9.3, 10.0 through 10.4 Description: This issue involves the use of externally-controlled input to select classes o...
PT-2025-35058
Name of the Vulnerable Software and Affected Versions: TieLabs Jannah versions through 7.4.1 Description: The software contains an Improper Control of Filename for Include/Require Statement, leading to a PHP Local File Inclusion issue. Recommendations: Update Jannah to a version later than 7.4.1...
Referral Beware, Your Rewards are Mine (Part 1)
The post Referral Beware, Your Rewards are Mine Part 1 appeared first on Rhino Security Labs...
Zeek 8.0.1
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
Linux Distros Unpatched Vulnerability : CVE-2013-7370
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware CVE-2013-7370 Note that Nessus relies on the presence of the package as reported by the...