EUVD-2022-40580

Malicious code in bioql PyPI...

EUVD-2023-25938

Malicious code in bioql PyPI...

EUVD-2022-4129

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-22232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to Vault. Your application may be affected...

Malicious code in sagemaker_session_manager (npm)

The package sagemakersessionmanager was found to contain malicious code...

MAL-2025-32624 Malicious code in sagemaker_session_manager (npm)

The package sagemakersessionmanager was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-36041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all...

Command Injection

Overview agentUniverse is an agentUniverse is a framework for developing applications powered by multi-agent base on large language model. Affected versions of this package are vulnerable to Command Injection via the StdioServerParameters function of the MCPSessionManager/MCPTool/MCPToolkit...

CVE-2020-25374

CyberArk Privileged Session Manager PSM 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after two hours of idle time...

CVE-2019-16354

The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions...

CVE-2025-26651

Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

Windows Local Session Manager DoS

The vulnerability of the Windows Local Session Manager LSM component of the Windows operating system is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

CVE-2025-26651

Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

CVE-2025-26651 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-26651 Windows Local Session Manager (LSM) Denial of Service Vulnerability

...

CVE-2025-26651

CVE-2025-26651 is a Windows Local Session Manager (LSM) denial-of-service vulnerability. An authorized attacker could trigger a network-based DoS by exploiting an exposed dangerous method/function in LSM. The issue is documented across multiple sources and is being addressed by Microsoft security...

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

PT-2025-15503

Name of the Vulnerable Software and Affected Versions: Windows Local Session Manager LSM affected versions not specified Description: A denial-of-service issue exists, allowing an authorized attacker to deny service over a network by exploiting an exposed dangerous method or function in the Windo...

CVE-2025-26651: Exposed Dangerous Method or Function

Exposed dangerous method or function in Windows Local Session Manager LSM allows an authorized attacker to deny service over a network...

Spring Cloud Config Server May Not Use Vault Token Sent By Clients

Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to Vault. Your application may be affected by this if the following are true: In this case the SessionManager persists the first token it retrieves and will continue to use that...