27142 matches found
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Expl...
CVE-2025-49037
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Federico Rota Authentication and xmlrpc log writer authentication-and-xmlrpc-log-writer allows Reflected XSS.This issue affects Authentication and xmlrpc log writer: from n/a through = 1.2.2...
CVE-2025-38531
In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...
CVE-2025-34154
UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...
Security Bulletin: IBM QRadar Log Source Management app for IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Log Source Management app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is ...
Linux Distros Unpatched Vulnerability : CVE-2022-48425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. CVE-2022-48425 Note that...
Linux Distros Unpatched Vulnerability : CVE-2025-21907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: memory-failure: update ttu flag inside unmappoisonedfolio Patch series mm: memoryfailure: unmap poisoned folio during migrate properly, v3. Fix two bugs...
Linux Distros Unpatched Vulnerability : CVE-2024-26696
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix hang in nilfslookupdirtydatabuffers Syzbot reported a hang issue in migratepagesbatch called by mbind and nilfslookupdirtydatabuffers called in the...
Linux Distros Unpatched Vulnerability : CVE-2020-15106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file a...
Backstage 日志信息泄露漏洞
Backstage is a Backstage open source application. Backstage is an open platform for building developer portals. A log information disclosure vulnerability exists in versions prior to Backstage 2.1.1, which stems from duplicate logging of input values resulting in some secrets not being edited...
Malicious code in @avoc-analytics-skeleton-monorepo/log (npm)
The package @avoc-analytics-skeleton-monorepo/log was found to contain malicious code...
Malicious code in @zalastax/nolb-_log (npm)
The package @zalastax/nolb-log was found to contain malicious code...
Malicious code in cbg-log (npm)
The package cbg-log was found to contain malicious code...
Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...
Malicious code in cx-log (npm)
The package cx-log was found to contain malicious code...
Malicious code in @frozen-team/deploy-log (npm)
The package @frozen-team/deploy-log was found to contain malicious code...
Malicious code in trace-log-builder (npm)
The package trace-log-builder was found to contain malicious code...
Malicious code in discord_debug_log (npm)
The package discorddebuglog was found to contain malicious code...