380 matches found
CVE-2025-66511: Use of Insufficiently Random Values
Nextcloud Calendar is a calendar app for Nextcloud. Prior to 6.0.3, the Calendar app generates participant tokens for meeting proposals using a hash function, allowing an attacker to compute valid participant tokens, which allowed them to request details and submit dates in meeting proposals. The...
CVE-2025-13353: Use of Insufficiently Random Values
In gokey versions 0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM authentication tag of the key seed. This issue has been fixed in gokey version 0.2.0. This is a breaking change. The fix has invalidated any...
CVE-2025-59371: Use of Insufficiently Random Values
An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security...
CVE-2025-13470: Use of Insufficiently Random Values
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...
Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2025-7783)
Summary IBM Security SOAR uses an older version of the form-data javascript module that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.7.1 Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTIO...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a...
CVE-2025-12787: Use of Insufficiently Random Values
The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...
CVE-2025-6515: Use of Insufficiently Random Values
The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...
EUVD-2007-6119
Malware in sbrugna...
EUVD-2018-5228
Malware in sbrugna...
EUVD-2021-0005
Malware in sbrugna...
EUVD-2019-14837
Malware in sbrugna...
EUVD-2021-12919
Malware in sbrugna...
EUVD-2021-15884
Malware in sbrugna...
EUVD-2022-24904
Malicious code in bioql PyPI...
EUVD-2022-28229
Malicious code in bioql PyPI...
EUVD-2022-46484
Malicious code in bioql PyPI...
EUVD-2023-44436
Malicious code in bioql PyPI...