5507 matches found
EUVD-2025-25272
Malicious code in bioql PyPI...
Seeing Is Deceiving: Mirror-Based LiDAR Spoofing for Autonomous Vehicle Deception
Autonomous vehicles AVs rely heavily on LiDAR sensors for accurate 3D perception. We show a novel class of low-cost, passive LiDAR spoofing attacks that exploit mirror-like surfaces to inject or remove objects from an AV's perception. Using planar mirrors to redirect LiDAR beams, these attacks...
Linux Distros Unpatched Vulnerability : CVE-2025-4563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the...
Linux Distros Unpatched Vulnerability : CVE-2023-1098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from...
Linux Distros Unpatched Vulnerability : CVE-2024-5435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5,...
Linux Distros Unpatched Vulnerability : CVE-2017-7480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...
SUSE CVE-2025-7777
The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...
CVE-2025-7777
The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...
CVE-2025-7777 Mirror-registry: host header injection in mirror-registry
The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...
CVE-2025-7777 Mirror-registry: host header injection in mirror-registry
The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...
CVE-2025-7777
CVE-2025-7777 concerns a host header sanitation flaw in the mirror-registry that allows an attacker to induce redirects to attacker-controlled domains or phishing hosts. The vulnerability affects the mirror-registry’s handling of the Host header in HTTP requests, with an attack surface implied fo...
PT-2025-34038 · Unknown · Mirror-Registry
Name of the Vulnerable Software and Affected Versions: mirror-registry affected versions not specified Description: The mirror-registry does not properly sanitize the host header HTTP header in received HTTP requests, which allows an attacker to perform malicious redirects to attacker-controlled...
Red Hat Developer Hub 安全漏洞
Red Hat Developer Hub is an enterprise-grade, internal developer platform from Red Hat USA. A security vulnerability exists in Red Hat Developer Hub that stems from insufficient access control and could lead to a cluster administrator modifying the contents of a mirror...
MAL-2025-21455 Malicious code in git-mirror-client (npm)
The package git-mirror-client was found to contain malicious code...
Malicious code in git-mirror-client (npm)
The package git-mirror-client was found to contain malicious code...
MAL-2025-25555 Malicious code in logrocket-video-mirror (npm)
The package logrocket-video-mirror was found to contain malicious code...
Malicious code in logrocket-video-mirror (npm)
The package logrocket-video-mirror was found to contain malicious code...
Onion Site Template 信任管理问题漏洞
Onion Site Template is a self-hosted example from Vessel9817 Individual Developer. Onion Site Template suffers from a trust management issue vulnerability that stems from the inclusion of a fixed tor mirror, which could lead to a compromised website...
CVE-2025-36116
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that th...