Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from...

rConfig 3.9 - SQL Injection

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. id: CVE-2020-10220 info: name: rConfig 3.9 - SQL Injection author: ritikchaddha,theamanrawat severity: critical description: | An issue was discovered i...

Adobe ColdFusion - Access Control Bypass

An attacker is able to access every CFM and CFC endpoint within the ColdFusion Administrator path /CFIDE/, of which there are 437 CFM files and 96 CFC files in a ColdFusion 2021 Update 6 install. id: CVE-2023-29298 info: name: Adobe ColdFusion - Access Control Bypass author:...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticat...

Crow-Eye v0.13.0

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

MAL-2026-15938 Malicious code in dac-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203490886d6928aee2c8d681d282f53d8513907b30be5e5e20fe1effb5fd21d2 On import of dactools, the top-level init.py executes whoami and hostname via subprocess, concatenates the results into a DNS label, and triggers...

Malicious code in dac-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203490886d6928aee2c8d681d282f53d8513907b30be5e5e20fe1effb5fd21d2 On import of dactools, the top-level init.py executes whoami and hostname via subprocess, concatenates the results into a DNS label, and triggers...

gha-lab-a815a82f03-1

CloudPirates ओपन सोर्स हेल्म चार्ट्स क्लाउड-नेटिव एप्लिकेशनों के लिए प्रोडक्शन-रेडी हेल्म चार्ट्स का एक चयनित संग्रह। यह रिपॉजिटरी क्लाउड-नेटिव सर्वोत्तम प्रथाओं का पालन करते हुए सुरक्षित, अच्छी तरह से प्रलेखित और कॉन्फ़िगरेबल हेल्म चार्ट प्रदान करती है। ⚠️ महत्वपूर्ण : 15 अप्रैल, 2026 से, सभी...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 13.0.2 Vulnerability Details CVEID:CVE-2026-44249 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final, ...

deadair v0.8.0

deadair checks whether enabled SIEM detections still have the telemetry they need. It reports missing or stale data, ingest delays, and schema mismatches. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in...

CVE-2020-37277

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

CVE-2020-37277

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

CVE-2020-37277

PocketMine-MP versions prior to 3.15.4 are affected by a denial of service vulnerability in the InventoryTransaction component's findResultItem() method. A malicious, authenticated client can send specially crafted InventoryTransactionPackets containing multiple conflicting pathways , causing exp...

EUVD-2020-31270

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

CVE-2020-37277 PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

CVE-2020-37277 PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

netwatch v0.30.0

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...