Drupal Google Optimize 安全漏洞

Drupal Google Optimize is an online split testing tool for the Drupal community. A security vulnerability exists in Drupal Google Optimize. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Fedora 41 : dotnet9.0 (2025-2edd9dc83b)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-2edd9dc83b advisory. This is the monthly update for .NET 9 for March 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.3/9.0.104.md -...

OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine

As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...

InjectLab: a Tactical Framework for Adversarial Threat Modeling against Large Language Models

Large Language Models LLMs are changing the way people interact with technology. Tools like ChatGPT and Claude AI are now common in business, research, and everyday life. But with that growth comes new risks, especially prompt-based attacks that exploit how these models process language. InjectLa...

WalletProbe: a Testing Framework for Browser-Based Cryptocurrency Wallet Extensions

Serving as the first touch point for users to the cryptocurrency world, cryptocurrency wallets allow users to manage, receive, and transmit digital assets on blockchain networks and interact with emerging decentralized finance DeFi applications. Unfortunately, cryptocurrency wallets have always...

OpenPanel 0.3.4 - Incorrect Access Control

Exploit Title: OpenPanel 0.3.4 - Incorrect Access Control Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2024-53582 GET /files/../...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-6228)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6228 advisory. - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

Apache Tomcat CVE-2025-24813 Proof of Concept PoC !License...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zot, helm-operator, cluster-api-helm-controller, k9s, chart-testing, eksctl, helm-docs, kots, rancher-helm, k8ssandra-client, cert-manager-cmctl, kubescape, flux, pluto, zarf, trivy, chartmuseum, consul-k8s, cilium-cli, helm-push, tw, flux-helm-controller,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zot, helm-operator, cluster-api-helm-controller, k9s, chart-testing, eksctl, helm-docs, kots, rancher-helm, k8ssandra-client, cert-manager-cmctl, kubescape, flux, pluto, zarf, trivy, chartmuseum, consul-k8s, cilium-cli, helm-push, tw, flux-helm-controller,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zot, helm-operator, cluster-api-helm-controller, k9s, chart-testing, eksctl, helm-docs, kots, rancher-helm, k8ssandra-client, cert-manager-cmctl, kubescape, flux, pluto, zarf, trivy, chartmuseum, consul-k8s, cilium-cli, helm-push, tw, flux-helm-controller,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: zot, helm-operator, cluster-api-helm-controller, k9s, chart-testing, eksctl, helm-docs, kots, rancher-helm, k8ssandra-client, cert-manager-cmctl, kubescape, flux, pluto, zarf, trivy, chartmuseum, consul-k8s, cilium-cli, helm-push, tw, flux-helm-controller,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: pluto, helm-operator-fips, k9s, zarf, k8ssandra-client-fips, chart-testing-fips, kuma, tw, kots, harbor, helm-operator, rancher-helm, helm-push, chartmuseum-fips, flux-helm-controller, eksctl, flux-source-controller, cilium-cli, k8ssandra-client, consul-k8s,...

QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems

QuickResponseC2 is a stealthy Command and Control C2 framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network activity is limited to uploading and downloading images, making it an fully undetectable by IPS/IDS...

Exploit for CVE-2025-2825

It is an exploit module/toolkit targeting CrushedFTP. The tool,...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2025-1381)

According to the versions of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these...

PVS BIOS based target devices are slow to boot

PVS BIOS based target devices were slow to boot, with following observations: BIOS based target devices often taking tens of minutes to boot successfully, occasionally target devices may fail to boot. The network conditions in standard production network were non optimal for PVS boot performance...

Microsoft Security Update Validation Report April 2025

Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

CLSA-2025-1744301726 libgcrypt: Fix of CVE-2024-2236

Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 RHEL-34579...

Juniper Junos OS Vulnerability (JSA96458)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96458 advisory. - An Improper Input Validation vulnerability in the CVE-2025-30648 Note that Nessus has not tested for these issues but has instead relied only on the application's...