SA-2025-143 - React2Shell (CVE-2025-55182)
Summary A pre-authentication remote code execution exists in React Server Components, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpac...
Blog Articles
SA-2025-128 - VMware Aria Local Privilege Escalation via SDMP (CVE-2025-41244)
Summary A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this to escalate privi...
SA-2025-077 - OpenSSH DRAM Hammer Row Attacks (CVE-2023-51767)
Summary In OpenSSH, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist ...
- Max-Jobs on: SA-2026-030 - AirSnitch Wi-Fi Attacks
- Jon_P on: SA-2025-092 - eBPF Verifier Branch Pruning Linux K...
- FredrikB-NN2 on: SA-2023-103 - Privilege escalation via Redis serve...
- ACollins on: SA-2023-091 - OpenSSH information leak (CVE-2020-1...
- CraigW on: SA-2023-023 - OpenSSL c_rehash script (CVE-2022-20...
- AntonioP on: Security Advisory - SA-2022-007 - TLS Heap Overflo...
-
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
- Danny_Schaper on: Security Advisory - SA-2022-003 - "Spring4Shell" (...
- StephanH on: Vulnerability Notice VN-2021-460- "FragAttacks" Wi...
