766 matches found
CVE-2025-33042 vulnerabilities
Vulnerabilities for packages: wavefront-proxy, druid, celeborn, akhq, apache-pulsar, logstash, spark...
GHSA-RP46-R563-JRC7 vulnerabilities
Vulnerabilities for packages: wavefront-proxy, druid, celeborn, akhq, apache-pulsar, logstash, spark...
Windows Malware Uses Pulsar RAT for Live Chats While Stealing Data
We usually think of computer viruses as silent, invisible programs running in the background, but a worrying discovery shows that modern hackers are getting much more personal...
CVE-2023-31007
Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connected to a broker after authentication data expires if the client connected through the Pulsar Proxy when the broker is configured with authenticateOriginalAuthData=false or if a...
CVE-2022-33683
Apache Pulsar Brokers and Proxies create an internal Pulsar Admin Client that does not verify peer TLS certificates, even when tlsAllowInsecureConnection is disabled via configuration. The Pulsar Admin Client's intra-cluster and geo-replication HTTPS connections are vulnerable to man in the middl...
CVE-2022-33684
The Apache Pulsar C++ Client does not verify peer TLS certificates when making HTTPS calls for the OAuth2.0 Client Credential Flow, even when tlsAllowInsecureConnection is disabled via configuration. This vulnerability allows an attacker to perform a man in the middle attack and intercept and/or...
CVE-2022-26080
Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C2 G4612 – comcode 150047415...
CVE-2025-46392 vulnerabilities
Vulnerabilities for packages: apache-pulsar...
GHSA-PVP8-3XJ6-8C6X vulnerabilities
Vulnerabilities for packages: apache-pulsar...
GHSA-PVP8-3XJ6-8C6X vulnerabilities
Vulnerabilities for packages: wso2is...
CVE-2025-46392 vulnerabilities
Vulnerabilities for packages: wso2is...
Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gateways
The rapid expansion of generative AI has normalized large-scale synthetic media creation, enabling new forms of covert communication. Recent generative steganography methods, particularly those based on diffusion models, can embed high-capacity payloads without fine-tuning or auxiliary decoders,...
CVE-2024-29371 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, confluent-common-docker, apache-pulsar...
GHSA-3677-XXCR-WJQV vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, confluent-common-docker, apache-pulsar...
GHSA-3677-XXCR-WJQV vulnerabilities
Vulnerabilities for packages: kayenta-fips, apache-pulsar, hadoop-fips, kayenta, kafka, strimzi-kafka-operator, confluent-common-docker...
CVE-2024-29371 vulnerabilities
Vulnerabilities for packages: kayenta-fips, apache-pulsar, hadoop-fips, kayenta, kafka, strimzi-kafka-operator, confluent-common-docker...
This Week in Spring – December 16th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it’s been! We’ve got around nine shopping days ’til Christmas, and the New Year is almost here! Things are moving so quickly and the Spring community is no exception! Let's dive into this week's wonderful...
This Week in Spring - November 18th, 2025
This Week in Spring - November 18th, 2025 Hi, Spring fans! I'm thrilled to be in New York City for an exciting week of joint presentations on Spring AI + Bedrock and Spring Boot with the legendary James Ward. First up: we'll present a workshop at the AI Native Dev Conf today, then speak at the...
Malicious code in xenon-graviton-gravity-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5cd3c1a720ee5addd563d7161ef6e801e83409e8f804fd7355ef0ddb38c2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
