1109 matches found
Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values
A mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s middleware reads the path for validation checks. Astro internally applies decodeURI to determine which route to render, while the middleware uses context.url.pathname without applying the...
Linux Distros Unpatched Vulnerability : CVE-2025-64500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-49889)
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4extshowleaf In ext4findextent, path may be freed by error or be reallocated, so using a previously saved ppath may have been freed and thus may trigger use-after-free, as follows: ext4splitextent...
[SECURITY] [DSA 6035-1] python-internetarchive security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6035-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 23, 2025 https://www.debian.org/security/faq -...
Debian dsa-6035 : internetarchive - security update
The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6035 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6035-1 [email protected] https://www.debian.org/security/...
[SECURITY] [DSA 6029-1] ark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6029-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 20, 2025 https://www.debian.org/security/faq -...
AlmaLinux 10 : kea (ALSA-2025:9178)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:9178 advisory. kea: Loading a malicious hook library can lead to local privilege escalation CVE-2025-32801 kea: Insecure handling of file paths allows multiple local...
Linux Distros Unpatched Vulnerability : CVE-2025-11233
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library...
EUVD-2020-30773
Malware in sbrugna...
EUVD-2018-10087
Malware in sbrugna...
EUVD-2021-17886
Malware in sbrugna...
EUVD-2018-0608
Malware in sbrugna...
EUVD-2021-17638
Malware in sbrugna...
EUVD-2019-16833
Malware in sbrugna...
EUVD-2020-2475
Malware in sbrugna...
EUVD-2012-5061
Malware in sbrugna...
EUVD-2020-20389
Malware in sbrugna...
EUVD-2018-10074
Malware in sbrugna...