17106 matches found
Nagios Log Server 安全漏洞
Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, Inc. A security vulnerability exists in Nagios Log Server versions prior to 2024R1.3.2, which originates from an authenticated user being able to stop the Elasticsearch service via an API...
Grafana 11.2.x < 11.2.8 Improper Authorization
According to its self-reported version, the Grafana install hosted on the remote host is prior to 10.4.17, or 11.2.x prior to 11.2.8, or 11.3.x prior to 11.3.5, or 11.4.x prior to 11.4.3, or 11.5.x prior to 11.5.3. It is, therefore, affected by an improper authorization. - Grafana's datasource...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414541)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414541 advisory. A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close and fget...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mod_security (UTSA-2025-592625)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-592625 advisory. ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service...
OpenBSD OpenSSH < 10.1 Multiple Vulnerabilities
OpenBSD OpenSSH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...
"Your Doctor Is Spying on You": An Analysis of Data Practices in Mobile Healthcare Applications
Mobile healthcare mHealth applications promise convenient, continuous patient-provider interaction but also introduce severe and often underexamined security and privacy risks. We present an end-to-end audit of 272 Android mHealth apps from Google Play, combining permission forensics, static...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-387275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387275 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash when experimenting wi...
Exploit for Improper Access Control in Oracle Concurrent_Processing
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detect...
CVE-2025-0606
Logo Cloud by Logo Software Inc. is affected by CVE-2025-0606 due to an authorization bypass caused by a user-controlled key. This flaw enables forceful browsing and potential resource disclosure on Logo Cloud versions before 0.67. The issue’s root cause is the improper handling of keys that gran...
CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS
The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...
📄 FortiWeb Fabric Connector 7.6.x SQL Injection
FortiWeb Fabric Connector versions 7.6.x suffer from a pre-authentication remote SQL injection vulnerability. Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL Injection to Remote Code Execution Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact:...
Flowise 安全漏洞
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from the presence of cross-site scripting in the FORM element and the INPUT element, which could lead to cross-site scripting attacks...
PT-2025-40840
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.0.5 Description Flowise has a cross-site scripting XSS issue. This occurs through a FORM element and an INPUT element when an administrator views the chat log. Recommendations Update Flowise to version 3.0.5 or late...
📄 Mac OS X Persistent Payload Installer
This Metasploit module provides a persistent boot payload by creating a launch item, which can be a LaunchAgent or a LaunchDaemon. LaunchAgents run with user level permissions and are triggered upon login by a plist entry in /Library/LaunchAgents. LaunchDaemons run with elevated privileges, and a...
SICK AG Enterprise Analytics 安全漏洞
SICK AG Enterprise Analytics is a package analysis software from SICK AG, Germany. A security vulnerability exists in SICK AG Enterprise Analytics that stems from pre-populated usernames that could lead to unauthorized access...
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files...
tomcat security update
An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...
EUVD-2025-25352
Malicious code in bioql PyPI...