175 matches found
EUVD-2025-25129
Malicious code in bioql PyPI...
EUVD-2024-35503
Malicious code in bioql PyPI...
CVE-2025-59305
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...
CVE-2025-59305
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...
CVE-2025-59305
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...
PT-2025-39319
Name of the Vulnerable Software and Affected Versions Langfuse versions prior to d67b317 Langfuse version 3.1 Description Improper authorization in the background migration endpoints of Langfuse allows any authenticated user to invoke migration control functions. This can lead to data corruption ...
CVE-2025-59305
CVE-2025-59305 concerns Langfuse 3.1 prior to the commit d67b317, where improper authorization on background migration endpoints allows any authenticated user to invoke migration control functions. Exploitable via TRPC endpoints such as backgroundMigrations.all, backgroundMigrations.status, and b...
CVE-2025-59305
Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the recursive use of stack buffers in XE migrations that could lead to a stack overflow...
Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 549f13f989fce7c29dae7c0e9f28fe0add0808204154896a48c7d5b093e0d6aa The OpenSSF Package Analysis project identified 'monolith-twirp-gitsrcmigrator-migrations' @ 1.11.0 rubygems as malicious. It is considered...
MAL-2025-46951 Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 549f13f989fce7c29dae7c0e9f28fe0add0808204154896a48c7d5b093e0d6aa The OpenSSF Package Analysis project identified 'monolith-twirp-gitsrcmigrator-migrations' @ 1.11.0 rubygems as malicious. It is considered...
Malicious code in monolith-twirp-octoshift-migrations (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...
MAL-2025-46914 Malicious code in monolith-twirp-octoshift-migrations (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...
Linux Distros Unpatched Vulnerability : CVE-2020-8185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in Rails 6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production...
Exploit for Out-of-bounds Write in Php
Task Management APP CVE-2019-11043 Lab Minimal PHP app with...
CVE-2025-55282
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...
CVE-2025-55282 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...