Lucene search
+L

11976 matches found

osv-bit
osv-bit
•added 2025/12/05 11:13 a.m.•13 views

BIT-PYTHON-MIN-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

5.5CVSS6.5AI score0.00149EPSS
SaveExploits0References10
OSV
OSV
•added 2025/12/05 11:08 a.m.•13 views

BIT-LIBPYTHON-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

5.5CVSS6.5AI score0.00149EPSS
SaveExploits0References10
Fedora
Fedora
•added 2025/12/05 2:22 a.m.•23 views

[SECURITY] Fedora 41 Update: fcgi-2.4.7-1.fc41

FastCGI is a language independent, scalable, open extension to CGI that provides high performance without the limitations of server specific APIs...

9.3CVSS7.9AI score0.00612EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/04 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-12084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References3
Akamai Blog
Akamai Blog
•added 2025/12/03 8:00 p.m.•17 views

Lessons from Smart Switching: Rethinking Security and Performance

Microsegmentation built directly into the network infrastructure means that stronger network security no longer equals slower systems...

7AI score
SaveExploits0
OSV
OSV
•added 2025/12/03 7:15 p.m.•17 views

AZL-71441 CVE-2025-12084 affecting package python3 for versions less than 3.9.19-19

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/02 5:57 p.m.•56 views

CVE-2025-66399

Cacti is an open source performance and fault management framework. Prior to 1.2.29, there is an input-validation flaw in the SNMP device configuration functionality. An authenticated Cacti user can supply crafted SNMP community strings containing control characters including newlines that are...

8.8CVSS7.7AI score0.10812EPSS
SaveExploits1
Patchstack
Patchstack
•added 2025/11/29 5:50 p.m.•19 views

WordPress TNC Toolbox: Web Performance plugin <= 2.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin TNC Toolbox: Web Performance versions = 2.0.4...

4.3CVSS6.8AI score0.00191EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/11/27 9:45 a.m.•36 views

CLSA-2025-1764151168 kernel: Fix of 39 CVEs

perf/aux: Fix AUX buffer serialization CVE-2024-46713 - block: fix uaf for flush rq while iterating tags CVE-2024-53170 - zram: fix potential UAF of zram table CVE-2025-21671 - sched: schcake: add bounds checks to host bulk flow fairness counts CVE-2025-21647 - bpf: Fix UAF via mismatching...

9.8CVSS6.9AI score0.00481EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/11/26 12:00 a.m.•19 views

Digital Twin-Driven Secure Access Strategy for SAGIN-Enabled IoT Networks

In space-air-ground integrated networks SAGIN-enabled IoT networks, secure access has become a significant challenge due to the increasing risks of eavesdropping attacks. To address these threats to data confidentiality, this paper proposes a Digital Twin DT-driven secure access strategy. The...

6.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/11/24 12:00 a.m.•19 views

Synthetic Data: AI'S New Weapon against Android Malware

The ever-increasing number of Android devices and the accelerated evolution of malware, reaching over 35 million samples by 2024, highlight the critical importance of effective detection methods. Attackers are now using Artificial Intelligence to create sophisticated malware variations that can...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/11/23 12:00 a.m.•17 views

PT-2025-53005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel related to the handling of Online Performance Points OPP within the devfreq subsystem for HiSilicon platforms. The issue arises from a...

9.8CVSS6.9AI score0.00693EPSS
SaveExploits11References416
RedhatCVE
RedhatCVE
•added 2025/11/22 12:33 p.m.•28 views

CVE-2025-66108

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

4.3CVSS6.9AI score0.00191EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/21 3:31 p.m.•20 views

EUVD-2025-198446

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

6.4AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/21 1:15 p.m.•16 views

CVE-2025-66108

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

4.3CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/21 12:30 p.m.•36 views

CVE-2025-66108 WordPress TNC Toolbox: Web Performance plugin <= 2.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

4.3CVSS0.00191EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/21 12:30 p.m.•35 views

CVE-2025-66108

CVE-2025-66108 concerns the WordPress plugin Merlot Digital TNC Toolbox: Web Performance (versions

4.3CVSS6AI score0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/21 12:30 p.m.•9 views

CVE-2025-66108 WordPress TNC Toolbox: Web Performance plugin <= 2.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

6AI score0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/21 12:00 a.m.•17 views

WordPress plugin TNC Toolbox: Web Performance 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.4AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/21 12:00 a.m.•4 views

CVE-2025-66108: Missing Authorization

Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...

4.3CVSS6AI score0.00191EPSS
SaveExploits0References1
Rows per page
Query Builder