375 matches found
EUVD-2025-14279
Malicious code in bioql PyPI...
EUVD-2025-25105
Malicious code in bioql PyPI...
EUVD-2021-29708
Malicious code in bioql PyPI...
EUVD-2021-29709
Malicious code in bioql PyPI...
EUVD-2023-2677
Malicious code in bioql PyPI...
EUVD-2024-49883
Malicious code in bioql PyPI...
CVE-2025-58056 vulnerabilities
Vulnerabilities for packages: apache-pulsar, opensearch, keycloak, wildfly, apache-activemq-artemis, keycloak-operator, apache-nifi, selenium, apicurio-registry, debezium-connector-vitess, celeborn, kserve-modelmesh, trino, wavefront-proxy, tez, thingsboard, docker-selenium, sonarqube, flyway,...
GHSA-FGHV-69VJ-QJ49 vulnerabilities
Vulnerabilities for packages: apache-pulsar, opensearch, keycloak, wildfly, apache-activemq-artemis, keycloak-operator, apache-nifi, selenium, apicurio-registry, debezium-connector-vitess, celeborn, kserve-modelmesh, trino, wavefront-proxy, tez, thingsboard, docker-selenium, sonarqube, flyway,...
CVE-2025-58056 vulnerabilities
Vulnerabilities for packages: keycloak-operator, apache-nifi, spark-fips, celeborn, flyway, kserve-modelmesh, neo4j, docker-selenium, apache-activemq-artemis, strimzi-kafka-operator, apache-hop, wildfly, hadoop-fips, camunda-zeebe, trino, tez, infinispan, kayenta-fips, logstash, spark,...
GHSA-FGHV-69VJ-QJ49 vulnerabilities
Vulnerabilities for packages: keycloak-operator, apache-nifi, spark-fips, celeborn, flyway, kserve-modelmesh, neo4j, docker-selenium, apache-activemq-artemis, strimzi-kafka-operator, apache-hop, wildfly, hadoop-fips, camunda-zeebe, trino, tez, infinispan, kayenta-fips, logstash, spark,...
GHSA-3P8M-J85Q-PGMJ vulnerabilities
Vulnerabilities for packages: keycloak-operator, apache-nifi, spark-fips, celeborn, flyway, kserve-modelmesh, management-api-for-apache-cassandra-5.0, zookeeper, neo4j, docker-selenium, apache-activemq-artemis, strimzi-kafka-operator, cloudwatch-exporter, apache-hop, wildfly, hadoop-fips,...
CVE-2025-9094
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094
CVE-2025-9094 affects ThingsBoard 4.1 in the Add Gateway Handler component, where improper neutralization of special elements in a template engine enables remote exploitation. Publicly disclosed exploit; vendor notes a fix in upcoming release (v4.2) with maintenance/LTS updates starting from 4.0....
ThingsBoard 安全漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard version 4.1, which stems from the Add Gateway Handler component improperly neutralizing special elements of the template...
PT-2025-33619
Name of the Vulnerable Software and Affected Versions: ThingsBoard version 4.1 Description: A vulnerability exists in ThingsBoard that affects unknown code within the Add Gateway Handler component. The issue involves improper neutralization of special elements used in a template engine, allowing...
Malicious code in thingsboard-advanced-attribute-widget (npm)
The package thingsboard-advanced-attribute-widget was found to contain malicious code...