81 matches found
cve-2024-32002-demo
High-Performance Data Processing Suite Production-ready data transformation library with advanced optimizations. Quick Start git clone --recursive https://github.com/srakkk/cve-2024-32002-demo...
[SECURITY] Fedora 43 Update: collectd-5.12.0-57.fc43
collectd is a daemon which collects system performance statistics periodically and provides mechanisms to store the values in a variety of ways, for example in RRD files...
The server’s vulnerability regarding the collection, storage, and display of performance data for SAP systems. The SAP Wily Introscope Enterprise Manager (EM) is vulnerable due to insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the server for collecting, storing, and displaying performance data in SAP SAP Wily Introscope Enterprise Manager is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...
The Dark Web Economy Behind Ad Fraud: What Marketers Don’t See
Ad fraud networks use bots, deepfakes and spoofed traffic to drain PPC budgets. This report shows how fake clicks distort performance data...
Intel CIP Information Disclosure Vulnerability
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause information...
Intel CIP Input Validation Error Vulnerability
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an input validation error vulnerability that stems from improper input validation, which can be exploited by an attacker to cause information...
Intel CIP Information Disclosure Vulnerability (CNVD-2025-28673)
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from mismanagement of privileges, which can be exploited by an attacker to cause information...
Intel CIP Improper Access Control Vulnerability
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an Improper Access Control vulnerability that can be exploited by an attacker to cause information disclosure...
Intel CIP Elevation of Privilege Vulnerability
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper privilege management and can be exploited by an attacker to cause elevation of...
CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
EUVD-2021-14906
Malware in sbrugna...
EUVD-2025-28614
Malicious code in bioql PyPI...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R2, which stems from cross-site scripting in a...
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2025-56432
A cross-site scripting (XSS) vulnerability exists in Nagios XI version 2024R2 . The flaw is located in a web component responsible for rendering performance-related data . A remote attacker can exploit this by providing a specially crafted URL to execute arbitrary JavaScript within the session co...
PT-2025-34786 · Nagios Enterprises · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R2 Description: A cross-site scripting XSS vulnerability exists that allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in ...