Craw Info
  • 首页
  • 归档
  • 分类
  • 标签
  • 关于

ColdFusion versions 20252, 202314, 202120 and earlier are affected by an Improper Restriction

链接: https://github.com/advisories/GHSA-x499-pm58-q38p CVSS 评分: 9.3 参考链接: https://nvd.nist.gov/vuln/detail/CVE-2025-49535 https://helpx.adobe.com/security/products/coldfusion/apsb25-69.html https://
2025-07-08
安全公告
#Github Advisory

Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing

链接: https://github.com/advisories/GHSA-5xp3-2ff8-9grr CVSS 评分: 9.8 参考链接: https://nvd.nist.gov/vuln/detail/CVE-2025-37103 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&d
2025-07-08
安全公告
#Github Advisory

pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages

链接: https://github.com/advisories/GHSA-x698-5hjm-w2m5 仓库 Star: 3530 CVSS 评分: 7.5 参考链接: https://github.com/pyload/pyload/security/advisories/GHSA-x698-5hjm-w2m5 https://github.com/pyload/pyload/commi
2025-07-08
安全公告
#Github Advisory

Sudo Privilege Escalation Vulnerability

漏洞信息漏洞名称: Sudo Privilege Escalation Vulnerability 漏洞编号: CVE: CVE-2025-32463 漏洞类型: 权限提升 漏洞等级: 高危 漏洞描述: CVE-2025-32463是一个影响Linux系统中sudo命令的本地权限提升漏洞。该漏洞允许攻击者通过滥用sudo chroot命令,在未授权的情况下获得root权限。受影响的系统包括Ub
2025-07-08
Github Poc
#CVE-2025:github search #权限提升

Discord IP Cache Poisoning Metadata Leak Vulnerability

漏洞信息漏洞名称: Discord IP Cache Poisoning Metadata Leak Vulnerability 漏洞编号: CVE: CVE-2025-48903 漏洞类型: 信息泄露 漏洞等级: 高危 漏洞描述: Discord是一款广泛使用的即时通讯软件,支持文字、语音和视频聊天,广泛应用于游戏社区、企业团队协作等场景。由于其庞大的用户基础和高度集成的社交功能,Disco
2025-07-08
Github Poc
#CVE-2025:github search #信息泄露

Cloudflare Vite plugin exposes secrets over the built-in dev server

链接: https://github.com/advisories/GHSA-4pfg-2mw5-f8jx 仓库 Star: 3251 参考链接: https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-4pfg-2mw5-f8jx https://github.com/cloudflare/workers-sdk/
2025-07-08
安全公告
#Github Advisory

sudo Local Privilege Escalation Vulnerability via --chroot

漏洞信息漏洞名称: sudo Local Privilege Escalation Vulnerability via –chroot 漏洞编号: CVE: CVE-2025-32463 漏洞类型: 权限提升 漏洞等级: 高危 漏洞描述: CVE-2025-32463是一个存在于sudo中的本地权限提升漏洞,影响版本为1.9.14至1.9.17p1之前的sudo二进制文件。sudo是一个广泛使
2025-07-08
Github Poc
#CVE-2025:github search #权限提升

Peplink Balance Two Unauthenticated Config Upload Vulnerability

漏洞信息漏洞名称: Peplink Balance Two Unauthenticated Config Upload Vulnerability 漏洞编号: CVE: CVE-2023-49230 漏洞类型: 未授权访问 漏洞等级: 高危 漏洞描述: Peplink Balance Two是一款广泛使用的网络负载均衡设备,适用于企业级网络环境,提供高可用性和网络流量管理功能。该设备在8.4.
2025-07-08
Github Poc
#projectdiscovery/nuclei-templates:github issues #未授权访问

Periodic Script Persistence

漏洞信息漏洞名称: Periodic Script Persistence 漏洞类型: 权限提升 漏洞等级: 高危 漏洞描述: 该漏洞利用模块通过在/etc/periodic目录下写入脚本实现持久化,主要影响Mac OS X、BSD和Arch Linux系统。根据The Art of Mac Malware的资料,截至2024年,尚未有恶意软件采用此种方式进行持久化。此漏洞需要
2025-07-08
Github Poc
#rapid7/metasploit-framework:github issues #权限提升

_r_netsec Twitter Update !

博主: _r_netsec 推文: 扫描后量子密码支持 https://t.co/USsKvT2vlJ 链接: https://x.com/_r_netsec/status/1942617949581492560
2025-07-08
推特监控
#_r_netsec
1…147148149150151…232

搜索

Hexo Fluid