CVE-2025-14493

CVE-2025-14493 affects RealDefense REALDefense SUPERAntiSpyware via the SAS Core Service, where an exposed dangerous function enables local privilege escalation to SYSTEM. An attacker must already have the ability to run low-privileged code; no user interaction is required. The vulnerability is v...

CVE-2025-25364

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges...

CVE-2025-13183

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Hotech Software Inc. Otello allows Stored XSS. This issue affects Otello: from 2.4.0 before 2.4.4...

CVE-2025-13183

creationtimestamp| type| source ---|---|--- 2025-12-23 13:15:34+00:00| seen| https://bsky.app/profile/potato.software/post/3mantffeij725 2025-12-23 15:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mao3piqwun2y...

CVE-2025-13183 Stored XSS in Hotech's Otello

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Hotech Software Inc. Otello allows Stored XSS. This issue affects Otello: from 2.4.0 before 2.4.4...

CVE-2023-52210

Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0...

CVE-2023-52210 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability

Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0...

Malicious code in sqzrframework480 (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tescoutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64babfcdec855007803f08c8c8b149b06c85ff017430ddeec4a2c9aa90c0897e The package tescoutils was found to contain malicious code...

Malicious code in node-calculator-40ed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c441ec0a4c581ca44cdcc6dbd499ff4597bc1efa5111fd407759cfcc0c2ce729 The package node-calculator-40ed was found to contain malicious code...

Malicious code in node-calculator-190a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32e5086f5a10acce38971e5ccbf0edbf50a0027033b7b9e251dee1e0facd021 The package node-calculator-190a was found to contain malicious code...

Malicious code in jsonupon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e934753e8b8ee104342730e5c20c02ad4724c9fdfdf889ffa8e026d141133cdc The package jsonupon was found to contain malicious code...

Malicious code in elf-stats-piney-train-884 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5d7fab007202575b6530749e2abfbd33c64feb6f48560f2eca4e1bcda5d778 The package elf-stats-piney-train-884 was found to contain malicious code...

Malicious code in elf-stats-flickering-satchel-815 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bddef43e9f29ba6eb3c46d51307ea8ae938d432c3a31e0e0d8167fd08d4a88a The package elf-stats-flickering-satchel-815 was found to contain malicious code...

MAL-2025-192725 Malicious code in chai-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a153ef79c99f8b960c8e0557a16cb187571a31c3d4c2479e177ab630b36b6af6 The package chai-pack was found to contain malicious code...

Malicious code in @ownbackup/data-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3acf1c89fb017fc30245400cef31895f729d2be6f8bd843c98a43eede73062 The package @ownbackup/data-chart was found to contain malicious code...

EUVD-2023-60241

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...

DEBIAN-CVE-2025-68615

net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2...

On the Effectiveness of Instruction-Tuning Local LLMs for Identifying Software Vulnerabilities

Large Language Models LLMs show significant promise in automating software vulnerability analysis, a critical task given the impact of security failure of modern software systems. However, current approaches in using LLMs to automate vulnerability analysis mostly rely on using online API-based LL...

📄 Institute Admission Software 2.5 SQL Injection

Institute Admission Software version 2.5 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Institute Admission Software 2.5 SQL INjection...