579 matches found
python-kdcproxy: Unauthenticated SSRF via Realm‑Controlled DNS SRV
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request f...
MINI-WXR5-W52P-3FHQ
Bulletin has no description...
CVE-2025-13282
TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use thes...
BELL-CVE-2025-40161
Bulletin has no description...
BELL-CVE-2025-40181
Bulletin has no description...
DEBIAN-CVE-2025-12445
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...
MINI-FHVR-P56F-G98W
Bulletin has no description...
DEBIAN-CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CGA-46MF-W938-7237
Bulletin has no description...
CanalDenuncia App 安全漏洞
CanalDenuncia App is a reporting channel application from CanalDenuncia Spain. The CanalDenuncia App suffers from an information disclosure vulnerability caused by incorrect authorization validation of the parameter email in /backend/api/users/searchUserByEmail.php, which can be exploited by an...
MINI-XR8C-VR77-5MRM
Bulletin has no description...
MINI-QCGM-VWH5-57FM
Bulletin has no description...
MINI-PFG2-FX3C-CJXJ
Bulletin has no description...
MINI-38X2-5FX7-WXW3
Bulletin has no description...
MINI-CFC4-3CRG-XC52
Bulletin has no description...
MINI-PH47-3999-J3X4
Bulletin has no description...
MINI-HGP8-3W85-CW93
Bulletin has no description...
Exposure of Sensitive Information
Overview zpdatafetch is an A package for fetching data from Zwiftpower and Zwiftracing.app Affected versions of this package are vulnerable to Exposure of Sensitive Information via several improper security practices, including logging of credentials in stdout, a lack of certificated validation,...
CVE-2025-11191 RealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via REST
The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site...
