3350 matches found
CVE-2025-62175 Mastodon streaming API fails to disconnect disabled and suspended users
Mastodon is a free, open-source social network server based on ActivityPub. In versions before 4.4.6, 4.3.14, and 4.2.27, disabling or suspending a user account does not disconnect the account from the streaming API. This allows disabled or suspended accounts to continue receiving real-time updat...
PT-2025-41808
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.4.6 Mastodon versions prior to 4.3.14 Mastodon versions prior to 4.2.27 Description Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.4.6, 4.3.14, and 4.2.27, disabling...
CVE-2025-61602 BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiId
BigBlueButton is an open-source virtual classroom. A denial-of-service DoS vulnerability in versions prior to 3.0.13 allows any authenticated user to crash the chat functionality for all participants in a meeting by sending a malformed reactionEmojiId in the GraphQL mutation...
EUVD-2025-33560
BigBlueButton is an open-source virtual classroom. A denial-of-service DoS vulnerability in versions prior to 3.0.13 allows any authenticated user to crash the chat functionality for all participants in a meeting by sending a malformed reactionEmojiId in the GraphQL mutation...
I Can'T Patch My OT Systems! a Look at CISA'S KEVC Workarounds and Mitigations for OT
We examine the state of publicly available information about known exploitable vulnerabilities applicable to operational technology OT environments. Specifically, we analyze the Known Exploitable Vulnerabilities Catalog KEVC maintained by the US Department of Homeland Security Cybersecurity and...
SUSE CVE-2025-61770
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser buffers the entire multipart preamble bytes before the first boundary in memory without any size limit. A client can send a large preamble followed by a valid boundary, causing...
EUVD-2020-19645
Malware in sbrugna...
EUVD-2021-0507
Malware in sbrugna...
EUVD-2020-1450
Malware in sbrugna...
EUVD-2019-10243
Malware in sbrugna...
EUVD-2021-1461
Malware in sbrugna...
EUVD-2020-18692
Malware in sbrugna...
EUVD-2021-2156
Malware in sbrugna...
EUVD-2021-0535
Malware in sbrugna...
EUVD-2023-1252
Malicious code in bioql PyPI...
EUVD-2022-1100
Malicious code in bioql PyPI...
EUVD-2022-26187
Malicious code in bioql PyPI...
EUVD-2022-1205
Malicious code in bioql PyPI...