54722 matches found
LitmusChaos 安全特征问题漏洞
LitmusChaos is a program open-sourced by Litmus Chaos that practices chaos engineering in a cloud-native manner. LitmusChaos suffers from a Security Feature Issue vulnerability that stems from a JWT signing key that is too short, which could lead to authentication bypass...
CVE-2025-40314
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the cdnspgadgetinit and cdnspgadgetexit functions, the gadget structure pdev-gadget was freed before its endpoints. The endpoints are...
The vulnerability of the AccessControlList component in the Linksys RE7000 router microprogramming system allows a intruder to increase their privileges.
The vulnerability of the AccessControlList component in the Linksys RE7000 router microprogramming system is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
EUVD-2025-201614
Malicious code in paysera-checkout-modal npm...
GHSA-W48Q-CV73-MX4W vulnerabilities
Vulnerabilities for packages: langfuse, librechat, opensearch-dashboards-fips, opensearch-dashboards, kibana, gemini-cli...
PT-2025-49240
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 3.1.3. This is due to the REST routes wslu/v1/check cache/type, wslu/v1/save cache/type, and wslu/v1/settings/clear counter cache being registered with...
org.eclipse.jgit: XXE vulnerability in Eclipse JGit
A flaw was found in Eclipse JGit. This vulnerability can allow information disclosure, denial of service, and other security issues when parsing XML files...
EUVD-2025-201249
Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing...
USN-7879-4: Linux kernel vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Several security issues were discovered in the Linux kernel. An attacker could possibly use...
EUVD-2025-201109
MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string...
CVE-2025-66404 mcp-server-kubernetes potential security issue in exec_in_pod tool
MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the execinpod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string...
Malicious code in elf-stats-sleighing-nutcracker-806 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c4fc1a8ab935ffec5b221cc760b227c8ae7c20f5161b74edf402ccf168be9f The package elf-stats-sleighing-nutcracker-806 was found to contain malicious code...
CGA-VCH3-4JQ5-284P
Bulletin has no description...
BIT-ACTIVEMQ-2021-26117 ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind
The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...
CVE-2024-36909
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
BIT-NGINX-GATEWAY-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...
Login Time Restriction - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-120
This module enables you to apply time-based login restrictions and display related warning or logout confirmation pages. The module doesn't sufficiently protect its confirmation routes from cross-site request forgery CSRF, allowing the logout confirmation route to be triggered without user...
The vulnerability of the tls_offload_ctx_tx() function in the include/net/tls.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the tlsoffloadctxtx function in the include/net/tls.h module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-58482
creationtimestamp| type| source ---|---|--- 2025-12-02 02:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xvsezlji2k 2025-12-02 10:02:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/115649398506324144 2025-12-02 10:03:00+00:00| seen|...