331 matches found
SAP NetWeaver AS Java Information Disclosure (3643603)
The version of SAP NetWeaver Application Server Java installed on the remote host is affected by an information disclosure vulnerability. Due to improper limitation of a pathname to a restricted directory, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker...
EUVD-2025-175343
Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to access user metadata and channel membership information from other teams via the API endpoint...
CVE-2025-42919
Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An unauthenticated attacker could exploit this vulnerability by inserting arbitrary path components in the request, allowing unauthorized access...
CVE-2025-42919
CVE-2025-42919 affects the SAP NetWeaver Application Server Java. The vulnerability is an information disclosure caused by improper restriction of path components, allowing an unauthenticated attacker to access internal metadata files by crafting URLs. The impact is partial confidentiality loss; ...
SAP NetWeaver Application Server Java 路径遍历漏洞
SAP NetWeaver Application Server Java is an application server from SAP Germany that provides a Java runtime environment. The product is primarily used to develop and run Java EE applications. A path traversal vulnerability exists in SAP NetWeaver Application Server Java, which stems from the...
CVE-2025-64522 Soft Serve is vulnerable to SSRF through its Webhooks
Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1...
CVE-2025-64180
Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use TOCTOU...
CVE-2025-59968 Junos Space Security Director: Insufficient authorization for sensitive resources in web interface
A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface. Tampering with this metadata can result in managed SRX Series devices permitting network traffic that...
Linux Distros Unpatched Vulnerability : CVE-2025-54288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any...
EUVD-2021-11784
Malware in sbrugna...
EUVD-2021-17784
Malware in sbrugna...
EUVD-2010-2214
Malware in sbrugna...
EUVD-2020-27462
Malware in sbrugna...
EUVD-2006-5999
Malware in sbrugna...
EUVD-2021-0015
Malware in sbrugna...
EUVD-2020-23776
Malware in sbrugna...
EUVD-2023-25550
Malicious code in bioql PyPI...
EUVD-2025-12749
Malicious code in bioql PyPI...