Intelbras VIP 3260 Z IA 授权问题漏洞

The Intelbras VIP 3260 Z IA is an IP surveillance camera produced by the Brazilian company Intelbras. Version 2.840.00IB005.0.T of the Intelbras VIP 3260 Z IA has an authorization issue vulnerability. This vulnerability stems from incorrect handling of files/OutsideCmd, which may lead to the...

PT-2026-8305

Name of the Vulnerable Software and Affected Versions Intelbras VIP 3260 Z IA version 2.840.00IB005.0.T Description A security flaw exists in Intelbras VIP 3260 Z IA, impacting an unknown functionality within the /OutsideCmd file. This flaw allows for weak password recovery and remote attack...

AZL-77010 CVE-2025-58190 affecting package kube-vip-cloud-provider 0.0.10-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77007 CVE-2025-47911 affecting package kube-vip-cloud-provider 0.0.10-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CLEANSTART-2026-CO80279 Within HostnameError

Security vulnerability affects the kube-vip package. Within HostnameError...

AZL-75491 CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992550 advisory. In the Linux kernel, the following vulnerability has been resolved: media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit ofgetchildbyname returns a node pointe...

CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24

CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24. A patched version of the package is available...

ChanCMS 安全漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. A security vulnerability exists in ChanCMS version 3.3.4, which originates from a template injection in the /vip/v1/file/save component, which may result in the execution of arbitrary code...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, gitlab-kas, hugo, influx, dfc, spegel, gitness, k8sgateway, mesosphere-vsphere-csi, k8sgpt-operator, kserve, nri-kubernetes, s5cmd, thanos, ingress-nginx-controller, nri-consul, restic, gitsign, infinispan-operator, nuclei, terraform-provider-random,...

AZL-71614 CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

EUVD-2019-4340

Malware in sbrugna...

EUVD-2017-15390

Malware in sbrugna...

EUVD-2018-20791

Malware in sbrugna...

EUVD-2019-19062

Malware in sbrugna...

EUVD-2016-7511

Malware in sbrugna...

EUVD-2023-43708

Malicious code in bioql PyPI...

EUVD-2024-51176

Malicious code in bioql PyPI...

EUVD-2024-51177

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, nats, gitsign, secrets-store-csi-driver-provider-aws, lvm-driver, shfmt, linkerd2-proxy-init, mongodb-kubernetes-operator, rancher-machine, ctop, newrelic-fluent-bit-output, grafana-operator, vault-k8s, octo-sts, newrelic-nri-statsd,...