2090 matches found
ROS-20251030-04
A vulnerability in the MongoDB database management system is related to misconfiguration of the lsid field. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
PT-2025-45855
Mattermost Server's Session ID and Session Token are potentially compromised in github.com/mattermost/mattermost-server...
Security update for libssh
This update for libssh fixes the following issues: CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...
SUSE-SU-2025:3787-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...
Security update for libssh
This update for libssh fixes the following issues: CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375 Patch Instructions: To install this SUSE upda...
SUSE-SU-2025:20894-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...
CVE-2025-6515 Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers
The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...
PT-2025-42788
Name of the Vulnerable Software and Affected Versions oatpp-mcp affected versions not specified Description The MCP SSE endpoint returns an instance pointer as the session ID, which is not unique or cryptographically secure. This allows network attackers with access to the oatpp-mcp server to gue...
CVE-2025-6515: Use of Insufficiently Random Values
The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...
SUSE-SU-2025:20847-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...
EUVD-2001-1086
Malware in sbrugna...
EUVD-2003-0487
Malware in sbrugna...
EUVD-2016-0353
Malware in sbrugna...
EUVD-2019-2161
Malware in sbrugna...
EUVD-2019-16215
Malware in sbrugna...
EUVD-2001-1453
Malware in sbrugna...
EUVD-2015-0211
Malware in sbrugna...
EUVD-2009-2161
Malware in sbrugna...