20571 matches found
CVE-2025-60536
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
CVE-2025-41718 Murrelektronik: Unprotected Transport of Credentials
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI...
Brute-Force Attack
ethycafides is vulnerable to brute-force attack. The vulnerability is due to the absence of specific anti-automation controls on the Admin UI login endpoint, which allows an attacker to perform credential testing attacks such as credential stuffing or password spraying to gain unauthorized access...
CVE-2025-60536
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...
CVE-2025-60536
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...
UI for Apache Kafka 安全漏洞
UI for Apache Kafka is an open source front-end interface for Kafka by Provectus. A security vulnerability exists in UI for Apache Kafka versions v0.6.0 through v0.7.2, which originates from the upload of a specially crafted configuration file and could lead to a denial of service attack...
Murrelektronik Firmware Impact67 安全漏洞
Murrelektronik Firmware Impact67 is a series of field module firmware from Murrelektronik, Germany. A security vulnerability exists in Murrelektronik Firmware Impact67 Pro 54630, which originates from the transmission of sensitive information in clear text and could allow an unauthorized remote...
KLA89275 SUI vulnerability in Microsoft Open Source Software
A spoofing vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-59288 CVE list CVE-2025-59288 high Solution Install necessary updates from the KB section, that are listed in your Windows...
CVE-2025-60537
CVE-2025-60537 affects Kafka UI, specifically the component "/kafka/ui/serdes/CustomSerdeLoader.java" in versions v0.6.0 to v0.7.2. The root cause is improper input validation in this loader, allowing attackers to execute arbitrary code when supplied with crafted data. The statements in connected...
CVE-2025-60537
Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...
PT-2025-42164
An issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to cause a Denial of Service DoS via uploading a crafted configuration file...
Text Generation Web UI 后置链接漏洞
Text Generation Web UI is a UI interface for native AI by oobabooga individual developers. A backlink vulnerability exists in Text Generation Web UI version 3.13 and earlier, which stems from a local file inclusion vulnerability in the character image upload feature that could result in reading...
PT-2025-41846
Name of the Vulnerable Software and Affected Versions YouDataSum CPAS Audit Management System versions prior to 4.9 Description The YouDataSum CPAS Audit Management System is susceptible to SQL Injection due to inadequate input validation. This allows remote, unauthenticated attackers to execute...
Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview react-ui-toast is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48321 Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-33878
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
