1493 matches found
PT-2025-43531
Name of the Vulnerable Software and Affected Versions Kottster versions 3.2.0 through 3.3.1 Description Kottster is a self-hosted Node.js admin panel. Versions 3.2.0 through 3.3.1 contain a pre-authentication remote code execution RCE vulnerability when running in development mode. Production...
SUSE CVE-2025-59043
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043 OpenBao vulnerable to denial of service via malicious JSON request processing
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
CVE-2025-59043
OpenBao (open source identity-based secrets management system) is vulnerable in versions prior to 2.4.1 to a denial-of-service scenario. A crafted JSON payload can cause excessive memory usage during deserialization (factor up to ~35), potentially bypassing max_request_size and triggering an out-...
Vulnerabilities fixed in Redis
Redis has fixed vulnerabilities in versions 8.2.1 and below. The vulnerabilities are in Redis' Lua scripting engine, which can be exploited by authenticated users. This can lead to remote code execution, out-of-bounds data access or server crashes. The vulnerabilities could compromise the integri...
EUVD-2021-24222
Malware in sbrugna...
EUVD-2018-3048
Malware in sbrugna...
EUVD-2019-8871
Malware in sbrugna...
EUVD-2019-7618
Malware in sbrugna...
EUVD-2020-17122
Malware in sbrugna...
EUVD-2020-7902
Malware in sbrugna...
Exploit for Improper Access Control in Oracle Concurrent_Processing
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detect...
📄 FortiWeb Fabric Connector 7.6.x SQL Injection
FortiWeb Fabric Connector versions 7.6.x suffer from a pre-authentication remote SQL injection vulnerability. Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL Injection to Remote Code Execution Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact:...
EUVD-2025-18650
Malicious code in bioql PyPI...
EUVD-2025-29646
Malicious code in bioql PyPI...
EUVD-2025-25352
Malicious code in bioql PyPI...
EUVD-2024-36639
Malicious code in bioql PyPI...
EUVD-2022-30638
Malicious code in bioql PyPI...