Lucene search
+L

10559 matches found

OSV
OSV
•added 2025/12/08 9:31 p.m.•17 views

GO-2025-4182 Coder logs sensitive objects unsanitized in github.com/coder/coder

Coder logs sensitive objects unsanitized in github.com/coder/coder...

7.8CVSS8.1AI score0.00232EPSS
SaveExploits1References9
Gitee
Gitee
•added 2025/12/07 6:54 p.m.•201 views

awesome-burp-extensions

This is a curated list of Burp Extensions, a collection of user-submitted plugins for the Burp Suite web application security testing tool. The repository is maintained under a CC0 1.0 Universal license, allowing for the permanent relinquishment of copyright and related rights to the works...

6.6AI score
SaveExploits0
NVD
NVD
•added 2025/12/05 7:15 p.m.•13 views

CVE-2025-66577

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...

5.3CVSS0.00274EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/12/05 6:34 p.m.•27 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS6.6AI score0.00128EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/05 6:18 p.m.•17 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS7AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/05 6:18 p.m.•40 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS0.00333EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/05 5:16 p.m.•21 views

CVE-2025-66552

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00311EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/05 4:36 p.m.•20 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS5.8AI score0.00311EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/05 4:36 p.m.•15 views

EUVD-2025-201446

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.1AI score0.00311EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/05 4:36 p.m.•56 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00311EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/05 4:36 p.m.•41 views

CVE-2025-66552

CVE-2025-66552 affects Nextcloud Server and Enterprise Server. The issue is due to incorrect path handling with groupfolders, causing the admin_audit app to fail to log all actions on files and folders inside groupfolders. The vulnerability is fixed in Nextcloud Server and Enterprise Server versi...

4.3CVSS5.8AI score0.00311EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/12/05 4:36 p.m.•19 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.5AI score
SaveExploits0References6
Chainguard
Chainguard
•added 2025/12/05 1:28 a.m.•28 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter-fips, kubecolor, kserve, aws-flb-cloudwatch-fips, cue-fips, kpt, kiali-fips, node-problem-detector, hugo-extended, gitlab-workhorse-ce-fips, jupyterhub-k8s-image-awaiter-fips, mods, monstache, gitleaks, jaeger-operator-fips, opa, kubernetes,...

7.5CVSS6.7AI score0.00457EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/05 12:00 a.m.•4 views

CVE-2025-66552: Insufficient Logging

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS5.9AI score0.00311EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/05 12:00 a.m.•22 views

Nextcloud Server 安全漏洞

Nextcloud Server is a Nextcloud server program open-sourced by Nextcloud. A security vulnerability exists in Nextcloud Server that stems from improper handling of group folder paths, which could lead to incomplete logging...

4.3CVSS6.3AI score0.00311EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/05 12:00 a.m.•18 views

PT-2025-49269

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 30.0.9 Nextcloud Server versions prior to 31.0.1 Description An issue exists in Nextcloud Server and Enterprise Server related to incorrect path handling with groupfolders. This resulted in the admin audit ap...

4.3CVSS6.4AI score0.00311EPSS
SaveExploits0References16
Wolfi
Wolfi
•added 2025/12/04 7:47 p.m.•42 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: redka, ctop, nvidia-container-toolkit, kubernetes-dashboard, prometheus-adapter, kapp, github-mcp-server, dask-gateway, dfc, actions-runner-controller, podinfo, spqr, db-operator, kube-vip-cloud-provider, kuberlr, k8ssandra-client, mesosphere-vsphere-csi, mkcert,...

7.5CVSS6.7AI score0.00457EPSS
SaveExploits2
OSV
OSV
•added 2025/12/04 6:15 p.m.•18 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/04 6:15 p.m.•28 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/04 5:59 p.m.•52 views

CVE-2025-9127 PX Enterprise Improper Sanitization Vulnerability

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00128EPSS
SaveExploits0References1
Rows per page
Query Builder