30396 matches found
advisory-db
This is a security advisory database for Rust crates published through crates.io. The database is maintained by the RustSec project and contains information on security vulnerabilities in various Rust crates. The database is stored in TOML format and can be consumed by various tools for auditing...
CVE-2025-58443 FOG's authentication bypass leads to full SQL DB dump
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...
CVE-2025-58443 FOG's authentication bypass leads to full SQL DB dump
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...
CVE-2025-58443 FOG's authentication bypass leads to full SQL DB dump
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...
DependencyCheck
This is an open-source project for a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. The project is called OWASP dependency-check. The project is written in Java and is designed to be used in a variety of environments, including...
FOG 访问控制错误漏洞
FOG is an open source computer cloning and management system open-sourced by the FOG Project. An access control error vulnerability exists in FOG 1.5.10.1673 and prior versions, which stems from an authentication bypass that could allow an attacker to unauthenticatedly dump a full SQL database...
PT-2025-36400
Name of the Vulnerable Software and Affected Versions: FOG versions 1.5.10.1673 and below Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. An authentication bypass vulnerability exists, allowing an attacker to perform an unauthenticated database dum...
Malicious code in bamboo-vortex-jwz170-project (npm)
The package bamboo-vortex-jwz170-project was found to contain malicious code...
Malicious code in cat-igloo-oii506-project (npm)
The package cat-igloo-oii506-project was found to contain malicious code...
Malicious code in boulder-topaz-wtu108-project (npm)
The package boulder-topaz-wtu108-project was found to contain malicious code...
Malicious code in pinnacle-fjord-okz371-project (npm)
The package pinnacle-fjord-okz371-project was found to contain malicious code...
Malicious code in cherry-reef-ovi707-project (npm)
The package cherry-reef-ovi707-project was found to contain malicious code...
Malicious code in savanna-yucca-ovl568-project (npm)
The package savanna-yucca-ovl568-project was found to contain malicious code...
Malicious code in kale-kite-ykz423-project (npm)
The package kale-kite-ykz423-project was found to contain malicious code...
Malicious code in cascade-emerald-clf852-project (npm)
The package cascade-emerald-clf852-project was found to contain malicious code...
Malicious code in quilt-bamboo-yxv852-project (npm)
The package quilt-bamboo-yxv852-project was found to contain malicious code...
Malicious code in reef-xylophone-ith481-project (npm)
The package reef-xylophone-ith481-project was found to contain malicious code...
Malicious code in giraffe-undertow-wtx566-project (npm)
The package giraffe-undertow-wtx566-project was found to contain malicious code...