CVE-2025-61639

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This...

UBUNTU-CVE-2025-61639

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This...

Brocade SANnav 安全漏洞

Brocade SANnav is a storage area network management software developed by the American company Brocade. Versions of Brocade SANnav prior to 2.4.0a contained security vulnerabilities. These vulnerabilities stemmed from improper logging in the update-reports-purge-settings.sh script, which could le...

PT-2026-5734

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...

DNN DotNetNuke 跨站脚本漏洞

DNN DotNetNuke is a.NET platform content management system developed by DNN Corporation. Version 9.5 of DNN DotNetNuke contains a cross-site scripting vulnerability. This vulnerability arises from allowing ordinary users to upload malicious XML files containing executable scripts through the...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via logging.FileHandler. An attacker can write empty files on the target filesystem by supplying a malicious...

GHSA-M7J5-R2P5-C39R picklescan vulnerable to arbitrary file create using logging.FileHandler

Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...

picklescan vulnerable to arbitrary file create using logging.FileHandler

Summary Unsafe pickle deserialization allows unauthenticated attackers to perform Arbitrary File Creation. By chaining the logging.FileHandler class, an attacker can bypass RCE-focused blocklists to create empty files on the server. The vulnerability allows creating zero-byte files in arbitrary...

SUSE CVE-2025-71183

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...

SMCP: Secure Model Context Protocol

Agentic AI systems built around large language models LLMs are moving away from closed, single-model frameworks and toward open ecosystems that connect a variety of agents, external tools, and resources. The Model Context Protocol MCP has emerged as a standard to unify tool access, allowing agent...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: rancher-helm, kube-arangodb, thanos-operator, aws-flb-cloudwatch, gitness, mattermost, telegraf, goreleaser, xeol, cilium-cli, kubernetes-dashboard-api, terraform-provider-pagerduty, terraform, bento, croc, opentofu, ferretdb, conftest, falco-no-driver,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: rancher-helm, kube-arangodb, thanos-operator, aws-flb-cloudwatch, gitness, mattermost, telegraf, goreleaser, xeol, cilium-cli, kubernetes-dashboard-api, terraform-provider-pagerduty, terraform, bento, croc, opentofu, ferretdb, conftest, falco-no-driver,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kube-arangodb, lvm-driver, thanos-operator, guac, stakater-reloader, grafana-rollout-operator, dockerize, spqr, kubernetes-csi-driver-nfs, nfs-subdir-external-provisioner, crossplane-provider-aws-kinesis, db-operator, kubernetes-csi-driver-hostpath,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: thanos-operator, nfs-subdir-external-provisioner, db-operator, ipfs-cluster, vault-secrets-webhook, sftpgo-plugin-pubsub, minio-object-browser, kubeflow, pgtimetable, cosign, helm-operator, crossplane-provider-sql, gitlab-runner, kube-logging-operator-custom-runner,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: thanos-operator, nfs-subdir-external-provisioner, db-operator, ipfs-cluster, vault-secrets-webhook, sftpgo-plugin-pubsub, minio-object-browser, kubeflow, pgtimetable, cosign, helm-operator, crossplane-provider-sql, gitlab-runner, kube-logging-operator-custom-runner,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: thanos-operator, nfs-subdir-external-provisioner, db-operator, ipfs-cluster, vault-secrets-webhook, sftpgo-plugin-pubsub, minio-object-browser, kubeflow, pgtimetable, cosign, helm-operator, crossplane-provider-sql, gitlab-runner, kube-logging-operator-custom-runner,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: thanos-operator, nfs-subdir-external-provisioner, db-operator, ipfs-cluster, vault-secrets-webhook, sftpgo-plugin-pubsub, minio-object-browser, kubeflow, pgtimetable, cosign, helm-operator, crossplane-provider-sql, gitlab-runner, kube-logging-operator-custom-runner,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kube-arangodb, lvm-driver, thanos-operator, guac, stakater-reloader, grafana-rollout-operator, dockerize, spqr, kubernetes-csi-driver-nfs, nfs-subdir-external-provisioner, crossplane-provider-aws-kinesis, db-operator, rabbitmq-cluster-operator, gitleaks, ratify,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: kube-arangodb, lvm-driver, thanos-operator, guac, stakater-reloader, grafana-rollout-operator, dockerize, spqr, kubernetes-csi-driver-nfs, nfs-subdir-external-provisioner, crossplane-provider-aws-kinesis, db-operator, rabbitmq-cluster-operator, gitleaks, ratify,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kube-arangodb, lvm-driver, thanos-operator, guac, stakater-reloader, grafana-rollout-operator, dockerize, spqr, kubernetes-csi-driver-nfs, nfs-subdir-external-provisioner, crossplane-provider-aws-kinesis, db-operator, kubernetes-csi-driver-hostpath,...