4024 matches found
PT-2025-34938 · Dahua · Dahua Smart Campus Integrated Management Platform +1
Name of the Vulnerable Software and Affected Versions: Dahua Smart Park Integrated Management Platform also referred to as the Dahua Smart Campus Integrated Management Platform affected versions not specified Description: A path traversal vulnerability exists in the SOAP-based GIS bitmap upload...
Citrix Session Recording deserialization vulnerability
Added: 08/27/2025 CVE: CVE-2024-8069 Background Citrix Session Recording is software for recording and archiving sessions for retrieval and playback. Problem Unsafe object deserialization in Citrix Session Recording could allow a remote attacker to execute arbitrary commands by sending a speciall...
Linux Distros Unpatched Vulnerability : CVE-2020-13578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial o...
ROS-20250822-24
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-21
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
ROS-20250822-23
A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...
USN-7648-2 php7.0, php7.2, php7.4 vulnerabilities
USN-7648-1 fixed several vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain hostnames containing null characters. A remote attacker...
Linux Distros Unpatched Vulnerability : CVE-2019-19791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG aka lemonldap-ng before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/REST endpoints when some...
Linux Distros Unpatched Vulnerability : CVE-2023-3247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for...
Linux Distros Unpatched Vulnerability : CVE-2025-6491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML...
Malicious code in janus-soap-lyra-cosmochemistry (npm)
The package janus-soap-lyra-cosmochemistry was found to contain malicious code...
Malicious code in meteor-yonder-soap-hermes (npm)
The package meteor-yonder-soap-hermes was found to contain malicious code...
Malicious code in soap-fetch-sociobiology-winston (npm)
The package soap-fetch-sociobiology-winston was found to contain malicious code...
Malicious code in dagda-octans-boson-soap (npm)
The package dagda-octans-boson-soap was found to contain malicious code...
Malicious code in local-phoebe-soap-react-bootstrap (npm)
The package local-phoebe-soap-react-bootstrap was found to contain malicious code...
MAL-2025-16981 Malicious code in child-process-rigel-soap-comet (npm)
The package child-process-rigel-soap-comet was found to contain malicious code...
MAL-2025-27143 Malicious code in nconf-sirius-dorado-soap (npm)
The package nconf-sirius-dorado-soap was found to contain malicious code...
MAL-2025-33577 Malicious code in soap-sirius-delphinus-brane (npm)
The package soap-sirius-delphinus-brane was found to contain malicious code...