Ugrás a tartalomra
Abstract art
Abstract art
Abstract art
Abstract art

Szolgáltatóknak

Böngésszen szolgáltatóknak szóló tartalmaink között.

2025. feb. 28.
Riasztás

NA - CVE-2025-27410 - PwnDoc is a penetration test reporting...

PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerable to path traversal in the TAR entry's name, allowing an attacker to...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-27413 - PwnDoc is a penetration test reporting...

PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into the database, including Path Traversal...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-27414 - MinIO is a high performance object storage....

MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2024-1509 - Brocade ASCG before 3.2.0 Web Interface is not...

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only...
security-database.com
Tovább
2025. feb. 28.
Riasztás

Medium - CVE-2025-26466 - A flaw was found in the OpenSSH package. For...

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-25379 - Cross Site Request Forgery vulnerability in...

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-25476 - A stored cross-site scripting (XSS)...

A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-25478 - The account file upload functionality in...

The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code,...
security-database.com
Tovább
2025. feb. 28.
Riasztás

NA - CVE-2025-25723 - Buffer Overflow vulnerability in GPAC version...

Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code.
security-database.com
Tovább
2025. feb. 27.
Biztonsági szemle

Unlock the AI Skills to Transform Your Data Center with Cisco U.

Unlock your potential with Cisco U's AI essentials course. Dive into hands-on learning, engage with real-world applications, and earn valuable Continuing Education (CE) credits—free until March 24, 2025.
blogs.cisco.com
Tovább
Nyelv
Típus