UBUNTU-CVE-2026-46098

In the Linux kernel, the following vulnerability has been resolved: net: caif: clear client service pointer on teardown caifconnect can tear down an existing client after remote shutdown by calling caifdisconnectclient followed by caiffreeclient. caiffreeclient releases the service layer referenc...

MaxKB 安全漏洞

MaxKB is an open-source question-answering system based on large language models and RAG, developed by 1Panel-dev. Versions of MaxKB prior to 2.8.0 contained security vulnerabilities. These vulnerabilities stemmed from access control flaws in the API for retrieving OSS file service URLs, which...

EUVD-2013-5879

Malware in sbrugna...

Fedora Core 10 FEDORA-2009-10445 (drupal-service_links)

The remote host is missing an update to drupal-servicelinks announced via advisory FEDORA-2009-10445. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

[SECURITY] Fedora 10 Update: drupal-service_links-6.x.1.0-5.fc10

The service links module enables admins to add links to a number of social bookmarking sites, blog search sites etc. Includes sites are del.icio.us, Digg, Reddit, ma.gnolia.com, Newsvine, Furl, Google, Yahoo, Technorati and IceRocket...

Cross site scripting

Cross-site scripting XSS vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names...

CVE-2009-3648

Cross-site scripting XSS vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names...

CVE-2009-3648

CVE-2009-3648 concerns a Cross-site scripting (XSS) vulnerability in the Drupal module Service Links 6.x-1.0. The issue allows remote authenticated users (with 'administer content types' permissions) to inject arbitrary script/HTML when displaying content type names, via unspecified vectors. The ...