9934 matches found
PT-2025-41785
Name of the Vulnerable Software and Affected Versions Elastic Cloud Enterprise versions 2.5.0 through 3.8.1 Elastic Cloud Enterprise version 4.0.0 through 4.0.1 Description An issue exists in Elastic Cloud Enterprise ECE related to the improper handling of special elements within its template...
XML Injection
io.minio:minio is vulnerable to XML Injection. The vulnerability is due to automatic substitution of XML tag values containing system property or environment variable references during processing, which allows an attacker to craft malicious XML input that exposes sensitive information such as...
GHSA-8HXP-QMPH-W5GQ Keycloak Potential Variable Reference in Model Storage Services
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...
EUVD-2025-25456
Keycloak Potential Variable Reference in Model Storage Services...
Keycloak Potential Variable Reference in Model Storage Services
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...
Incomplete Filtering of Special Elements
Overview Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements in the config-snippets feature flag. An attacker can access sensitive environment variables, including the Kubernetes service account token secret, by injecting arbitrary HAProxy directives. Note...
Linux Distros Unpatched Vulnerability : CVE-2023-53560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Add histograms to histvars if they have referenced variables Hist trigge...
CVE-2025-61677
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
EUVD-2017-17206
Malware in sbrugna...
EUVD-2002-1967
Malware in sbrugna...
EUVD-2020-7210
Malware in sbrugna...
EUVD-2020-0891
Malware in sbrugna...
EUVD-2019-0648
Malware in sbrugna...
EUVD-2018-0727
Malware in sbrugna...
EUVD-2018-0763
Malware in sbrugna...
EUVD-2006-0627
Malware in sbrugna...
EUVD-2009-4385
Malware in sbrugna...
EUVD-2003-1524
Malware in sbrugna...