11125 matches found
CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency CISA has warned of active exploitation of a high-severity security flaw impacting Gogs by adding it to its Known Exploited Vulnerabilities KEV catalog. The vulnerability, tracked as CVE-2025-8110 CVSS score: 8.7, relates to a case of path...
Microsoft NTLM 安全漏洞
Microsoft NTLM is a Microsoft authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The following...
EUVD-2026-1919
wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was discouraged for years, but the code was never removed. This might cause the API key to be leaked to different servers...
CVE-2026-22251
The CVE-2026-22251 entry concerns the wlc Weblate command-line client. Before version 1.17.0, wlc allowed unscoped API keys to be stored in settings, a practice that could enable an API key to be leaked to different servers. Public advisories from Debian/Ubuntu/OSV reflect this issue and referenc...
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
UBUNTU-CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
aiptx-cyber-mcp
Cyber MCPs - Security Tools for AI !MCP Securityhttps://...
GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that's capable of brute-forcing user passwords for services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux servers. "The current wave of campaigns is driven b...
PT-2026-2272
Name of the Vulnerable Software and Affected Versions Errands versions prior to 46.2.10 Description The software does not verify TLS certificates for CalDAV servers. Recommendations Update to version 46.2.10 or later...
MAESTRO Toolkit Exploiting VMware VM Escape Vulnerabilities
Cybersecurity researchers from Huntress detail a major VM Escape attack where hackers took over host servers. Using a secret toolkit called MAESTRO, the attackers stayed hidden for over a year. Read the exclusive details on how this breach was stopped and how to protect your network...
CVE-2005-1911
The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...
CVE-2021-28910
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server...
CVE-2021-28847
MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...
CVE-2022-37238
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting XSS via the currentRequest parameter...