CVE-2026-44552

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the toolservers and terminalservers keys in utils/tools.py do use a prefix. When two or more Open WebUI instances share a Redis database a supported and documented deployment pattern...

CVE-2026-44552 Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the toolservers and terminalservers keys in utils/tools.py do use a prefix. When two or more Open WebUI instances share a Redis database a supported and documented deployment pattern...

Exploit for CVE-2026-42945

NGINX CVE-2026-42945 Local Checker This repository provides t...

SUSE CVE-2026-43263

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all...

Exposure of Resource to Wrong Sphere

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the handling of Redis cache keys for toolservers and terminalservers when multiple instances share a Redis backend. An attacker can overwrite or inject malicious tool...

EUVD-2026-27660

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all...

CVE-2026-43263

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper interrupt handling during the creation and destruction of multiple instances in the...

EUVD-2001-1344

Malware in sbrugna...

EUVD-2019-2294

Malware in sbrugna...

PT-2025-36916

Multiple CWE-78...

CVE-2025-3915

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13567 2025-04-26 06:12:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3eesuwja2 2025-04-26 07:39:17+00:00| seen|...

CVE-2025-3246

creationtimestamp| type| source ---|---|--- 2025-04-17 22:58:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12373 2025-04-18 02:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6qwik2d 2025-04-18 03:12:05+00:00| seen| https://t.me/cvedetector/23291 2025-04-22...

CVE-2025-30456

creationtimestamp| type| source ---|---|--- 2025-03-31 18:15:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258407899763287 2025-03-31 18:15:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258407899763287 2025-03-31 23:15:52+00:00| seen|...

CVE-2025-24490

creationtimestamp| type| source ---|---|--- 2025-02-24 09:30:39+00:00| seen| Telegram/Vvd5MA2nmu0duCxF3bbKYEKWTKbzMFIp2pUAfan9WmCtw 2025-02-24 09:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114058233176053982 2025-02-24 10:26:03+00:00| seen|...

CVE-2024-32230

creationtimestamp| type| source ---|---|--- 2025-02-23 15:08:07+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fnuys22r 2025-02-23 15:08:08+00:00| seen| https://bsky.app/profile/cyberpunk.tools/post/3liu4fogkcs2r 2025-02-23 15:08:08+00:00| seen|...

Citrix workspace app for Windows issues with "limit instances"

If the user clicks multiple times on a published application it will launch several instances of the application even if "Limit to one instance per user" is set on the application...

CVE-2024-20529

creationtimestamp| type| source ---|---|--- 2024-11-06 19:10:48+00:00| seen| https://t.me/cvedetector/10025 2024-11-07 14:20:08+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113442108664352339 2024-11-07 14:20:08+00:00| seen|...

CVE-2024-9916

creationtimestamp| type| source ---|---|--- 2024-10-13 22:16:19+00:00| seen| https://t.me/cvedetector/7789 2025-02-12 09:28:20+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/113990205373134629 2025-02-12 09:29:27+00:00| seen|...

CVE-2024-39293

In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db. This patch introduced a potential kernel crash when multiple napi instances redirect to the same...