13 matches found
litellm vulnerable to remote code execution based on using eval unsafely
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
RLSA-2026:3516 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR...
EUVD-2014-9542
Malware in sbrugna...
MAL-2025-39254 Malicious code in wholelot-storage-db (npm)
The package wholelot-storage-db was found to contain malicious code...
SUSE CVE-2016-9864
An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and ...
Create Efficient Well-Architected Cloud Infrastructure
This article explores the Performance Efficiency pillar of the Amazon Web Services and Azure Well-Architected Framework. We will examine how to create performance efficiency in the compute, storage, database, and network elements of cloud infrastructures...
DEBIAN-CVE-2016-9864
An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and ...
CVE-2014-9736
GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...
Default credentials
GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...
CVE-2014-9736
GE Healthcare Centricity Clinical Archive Audit Trail Repository is affected by a default-password issue: initinit for the SSL key manager and server keystore, keystore_password for the server truststore, and atna for the primary and archive storage databases. This credential exposure can enable ...
Updated phpmyadmin packages fix security vulnerabilities
Using a crafted SQL query, it was possible to produce an XSS on the SQL query form PMASA-2013-8CVE-2013-4995. In the setup/index.php, using a crafted hash with a Javascript event, untrusted JS code could be executed. In the Display chart view, a chart title containing HTML code was rendered...
