GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

GO-2024-3074 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, cilium, hubble-ui, cilium-cli, hubble-fips, cilium-fips...

GO-2024-2428 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2024-2657 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2023-1785 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2025-3566 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2024-3290 vulnerabilities

Vulnerabilities for packages: hubble...

GO-2024-3074 vulnerabilities

Vulnerabilities for packages: hubble-ui, cilium-cli, hubble...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, podman, sriov-network-device-plugin, nvidia-container-toolkit, grafana-alloy, kubernetes, falco-no-driver, k3s, buildah...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: podman, k8s-device-plugin, sriov-network-device-plugin, nvidia-container-toolkit, cadvisor, node-feature-discovery, buildah...

Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...

MAL-2026-14019 Malicious code in fr-ito-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bac76856f8825e8e433f56d508f0fdc44c9397a172c3cb1935e893de74aa03c1 The OpenSSF Package Analysis project identified 'fr-ito-web-react' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e., \\sms,...

TOTOLink - Unauthenticated Command Injection

TOTOLink A950RG V5.9c.4050B20190424 and V4.1.2cu.5204B20210112 were discovered to contain a command injection vulnerability in the Main function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter. id: CVE-2022-25082 info: name: TOTOLink -...

Smart s200 Management Platform v.S200 - SQL Injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component. id: CVE-2024-27718 info: name: Smart s200 Management Platform v.S200 - SQL Injection author:...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

Vite Dev Server - Path Traversal in Optimized Deps .map Handling

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...