16419 matches found
CVE-2025-8612
AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AOMEI Backupper Workstation. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2025-57749: Improper Link Resolution Before File Access
n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Write File node in n8n. While the node attempts to restrict access to sensitive directories and files, it does not properly account for symbolic links symlinks. An attacker with the...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : jq (SUSE-SU-2025:02915-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02915-1 advisory. - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute bsc1244116 Tenable has extracted the...
SUSE-SU-2025:02915-1 Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jqfuzzexecute bsc1244116...
CVE-2024-8393
The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via the 'tab' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary...
Trend Micro Apex One OS Command Injection Vulnerability
Trend Micro Apex One Management Console on-premise contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations...
Malicious code in log4net (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2c71f77b101535649693701491e46504cc3c34a5d35b7fa696e435f25916f2a The OpenSSF Package Analysis project identified 'log4net' @ 4.0.1 npm as malicious. It is considered malicious because: - The package communicat...
CVE-2025-24975 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when...
CVE-2025-24975 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when...
CVE-2025-5047 DGN File Parsing Uninitialized Variable Vulnerability
A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-54474
A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands...
PT-2025-33460 · WordPress · Bizcalendar Web
Name of the Vulnerable Software and Affected Versions: BizCalendar Web plugin for WordPress versions prior to 1.1.0.51 Description: The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion via the bizcalv shortcode. Authenticated attackers with Contributor-level access and...
Malicious code in book-user-process-protected-execute (npm)
The package book-user-process-protected-execute was found to contain malicious code...
Malicious code in serialize-module-wind-cache-execute (npm)
The package serialize-module-wind-cache-execute was found to contain malicious code...
MAL-2025-32038 Malicious code in reject-book-execute-bash-code (npm)
The package reject-book-execute-bash-code was found to contain malicious code...
Malicious code in reject-book-execute-bash-code (npm)
The package reject-book-execute-bash-code was found to contain malicious code...
MAL-2025-33443 Malicious code in small-psi-unix-execute-report (npm)
The package small-psi-unix-execute-report was found to contain malicious code...
Malicious code in star-execute-float-try-earth (npm)
The package star-execute-float-try-earth was found to contain malicious code...