CVE-2025-67039 Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username...

CVE-2025-67039: Authentication Bypass Using an Alternate Path or Channel

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username...

CVE-2025-67035 Lantronix EDS5000 OS Command Injection

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys,...

CVE-2026-3862 Cross-Site Scripting Vulnerability in SiteMinder Administrative UI

Cross-site Scripting XSS allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kaf, kubernetes-csi-external-provisioner, runc, spicedb, terraform-provider-azuread, gogatekeeper, crossplane-provider-aws-lambda, kube-metrics-adapter, kyverno, azure-service-operator, spire-controller-manager, opencost,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kaf, kubernetes-csi-external-provisioner, runc, spicedb, terraform-provider-azuread, gogatekeeper, crossplane-provider-aws-lambda, kube-metrics-adapter, kyverno, azure-service-operator, spire-controller-manager, opencost,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kaf, nri-elasticsearch, kubernetes-replicator, nri-consul, opencost, conjur-cli, crossplane-provider-aws-cloudfront, podman, newrelic-infrastructure-agent, cadvisor, nfs-subdir-external-provisioner, pvc-autoresizer, external-dns, tfsec, secrets-store-csi-driver,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kaf, nri-elasticsearch, kubernetes-replicator, nri-consul, opencost, conjur-cli, crossplane-provider-aws-cloudfront, podman, newrelic-infrastructure-agent, cadvisor, nfs-subdir-external-provisioner, pvc-autoresizer, external-dns, tfsec, secrets-store-csi-driver,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kaf, nri-elasticsearch, kubernetes-replicator, nri-consul, renovate, opencost, conjur-cli, crossplane-provider-aws-cloudfront, podman, newrelic-infrastructure-agent, cadvisor, nfs-subdir-external-provisioner, pvc-autoresizer, external-dns, tfsec,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: atlantis-fips, minio-object-browser, newrelic-nri-kube-events-fips, thanos-receive-controller, spqr, prometheus-elasticsearch-exporter, keda, vendir-fips, rancher, harbor-registry-fips, gomplate, listmonk, authentik, crossplane-provider-aws-s3-fips, kyverno, skopeo,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: atlantis-fips, minio-object-browser, newrelic-nri-kube-events-fips, thanos-receive-controller, spqr, prometheus-elasticsearch-exporter, keda, vendir-fips, rancher, harbor-registry-fips, gomplate, listmonk, authentik, crossplane-provider-aws-s3-fips, kyverno, skopeo,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: atlantis-fips, minio-object-browser, thanos-receive-controller, spqr, prometheus-elasticsearch-exporter, keda, rancher, harbor-registry-fips, gomplate, listmonk, authentik, crossplane-provider-aws-s3-fips, kyverno, skopeo, terraform-provider-grafana, kubescape,...

MAL-2026-1313 Malicious code in iron-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0828e4b92294651d9b815203d5e2e7cbe45cce351dfa340bb6a79481a4a0cd The package iron-pages was found to contain malicious code. Source: ghsa-malware ec5456f01c9dadf3a140d1cd4974007405b2fdf1a9f1639c264a194555229ec4 Any...

Malicious Package

Overview iron-pages is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in iron-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0828e4b92294651d9b815203d5e2e7cbe45cce351dfa340bb6a79481a4a0cd The package iron-pages was found to contain malicious code. Source: ghsa-malware ec5456f01c9dadf3a140d1cd4974007405b2fdf1a9f1639c264a194555229ec4 Any...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to disclose cross-domain data via specially crafted HTML pages...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 146.0.7680.71 contained a buffer overflow vulnerability. This vulnerability stemmed from an out-of-bounds read issue in the V8 engine, which could allow for out-of-bounds memory access through specially...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 146.0.7680.71 contained a security vulnerability. This vulnerability stemmed from incorrect security user interfaces in Downloads, which could allow UI deception through specially crafted...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 146.0.7680.71 contained a resource management vulnerability. This vulnerability stemmed from a problem with the WindowDialog class, where objects were reclaimed and reused after their initi...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability caused by insufficient policy enforcement in DevTools, which can be exploited by an attacker to bypass navigation restrictions via specially crafted HTML pages...