Argo CD allows cross-site scripting on repositories page

Impact This vulnerability allows an attacker to perform arbitrary actions on behalf of the victim via the API, such as creating, modifying, and deleting Kubernetes resources. Due to the improper filte ...

Continue Reading
CVE-2024-47056

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .envĀ configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of ...

Continue Reading
Mautic does not shield .env files from web traffic

Summary This advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of ...

Continue Reading
CVE-2024-47056

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .envĀ configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of ...

Continue Reading
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`

Summary A Regular Expression Denial of Service (ReDoS) vulnerability exists in the file vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py of the vLLM project. The root cause is the use of a ...

Continue Reading
Mautic does not shield .env files from web traffic

Summary This advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of ...

Continue Reading
CVE-2025-32801 Loading a malicious hook library can lead to local privilege escalation

Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the contro ...

Continue Reading
CVE-2024-47056 Mautic does not shield .env files from web traffic

SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .envĀ configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of ...

Continue Reading

Back to Main

Subscribe for the latest news: