1329 matches found
PT-2025-53411
Name of the Vulnerable Software and Affected Versions ONLYOFFICE Docs versions prior to 9.2.1 Description The software contains a flaw that allows for cross-site scripting XSS. This occurs through manipulation of the Font field within the Multilevel list settings window. The issue is related to t...
PT-2025-55374
Уязвимость офисного онлайн-пакета ONLYOFFICE Docs связана с некорректным определением символических ссылок перед доступом к файлу. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
PT-2025-53379
Name of the Vulnerable Software and Affected Versions ONLYOFFICE Docs versions prior to 9.2.1 Description The software contains a flaw that allows for Cross-Site Scripting XSS within the textarea of the comment editing form. This issue is related to the DocumentServer component. Recommendations...
MAL-2025-105313 Malicious code in lonely_weasel-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f870f98bee0713b3610f28c00373696af773766599d6afbc2e2d25c1299ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.8.0 release.
Red Hat Developer Hub 1.8.0 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
CVE-2025-56230
Tencent Docs Desktop versions 3.9.20 and earlier are vulnerable to a security flaw due to Missing SSL Certificate Validation in the update component. This lack of validation during the update process could lead to potential security risks. Remediation requires updating to a version later than 3.9...
CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
PT-2025-45051
Name of the Vulnerable Software and Affected Versions Tencent Docs Desktop versions 3.9.20 and earlier Description The update component in Tencent Docs Desktop does not properly validate SSL certificates. This could allow for potential security risks during the update process. Recommendations...
Tencent Docs Desktop 安全漏洞
Tencent Docs Desktop is a multiplayer online collaborative document tool from Tencent China. A security vulnerability exists in Tencent Docs Desktop 3.9.20 and prior versions, which stems from a lack of SSL certificate validation in the update component...
CVE-2025-56230: Missing Validation of OpenSSL Certificate
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.2 release.
Red Hat Developer Hub 1.7.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
Metasploit Wrap-Up 10/31/2025
New module content 3 ReDoc API Docs UI Exposed Author: Hamza Sahin Type: Auxiliary Pull request: 20594 contributed by HamzaSahin61 Path: scanner/http/redocexposed Description: Adds a module to detect publicly exposed ReDoc API documentation pages using read-only HTTP GET requests searching for...
@patternfly/patternfly-doc-core (1.15.1), joist-docs (>=1.267.1, <=1.271.0) potentially affected by CVE-2025-59837 via astro (>=5.13.4, <=5.13.5)
astro NPM version =5.13.4, =1.267.1, =1.271.0 Source cves: CVE-2025-59837 Source advisory: OSV:GHSA-QCPR-679Q-RHM2...
CVE-2025-62230
A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...
CVE-2025-62229
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...
