3045 matches found
CVE-2025-65530
CloudLinux ai-bolit versions prior to v32.7.4 are vulnerable to an eval injection within the malware de-obfuscation routines . An attacker can exploit this flaw by scanning a crafted file to overwrite arbitrary files as root . Remediation requires updating CloudLinux ai-bolit to version 32.7.4 or...
CVE-2025-65530
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...
CVE-2025-65530: Improper Neutralization of Directives in Dynamically Evaluated Code
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...
GTT Sistema de Información Tributario 安全漏洞
GTT Sistema de Información Tributario is an e-government platform from GTT USA. A security vulnerability exists in GTT Sistema de Información Tributario that stems from an authentication method bypass that could allow an attacker to impersonate any domain user...
Linux Distros Unpatched Vulnerability : CVE-2025-40271
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should us...
CVE-2025-40271
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in procreaddirde Pde is erased from subdir rbtree through rberase, but not set the node to EMPTY, which may result in uaf access. We should use RBCLEARNODE set the erased node to EMPTY, then pdesubdirnext will...
CVE-2025-63363: Improper Access Control
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...
CVE-2025-64763: Protection Mechanism Failure
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...
JLSEC-2025-259 LibTIFF 4.3.0 has an out-of-bounds read in `_TIFFmemcpy` in `tif_unix.c` in certain situations...
LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...
PT-2025-55417
LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tif unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...
rgui-3.4.4-seh-bof-exploit
💥 Exploração de Buffer Overflow SEH Overwrite no RGui 3.4.4...
learn_exploit_dev
Este repositorio contiene un seguim...
Malicious code in de-sxm-reactlib (npm)
The package de-sxm-reactlib was found to contain malicious code...
MAL-2025-48624 Malicious code in de-sxm-reactlib (npm)
The package de-sxm-reactlib was found to contain malicious code...
CVE-2025-60131
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...
EUVD-2025-35426
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...
CVE-2025-60131
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...
CVE-2025-60131 WordPress Werk aan de Muur Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...
CVE-2025-60131 WordPress Werk aan de Muur Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoefff Werk aan de Muur werk-aan-de-muur allows Stored XSS.This issue affects Werk aan de Muur: from n/a through = 1.5...