PT-2026-3979

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through = 2.3.0...

Arbitrary Code Injection

Overview binary-parser is a Blazing-fast binary parser builder Affected versions of this package are vulnerable to Arbitrary Code Injection via malicious field names. An attacker can execute arbitrary JavaScript code by supplying untrusted values in the field names or encoding parameters, which a...

PT-2026-3223

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

PT-2026-3048

Dynojet Power Core 2.3.0 contains an unquoted service path vulnerability in the DJ.UpdateService that allows local authenticated users to potentially execute code with elevated privileges. Attackers can exploit the unquoted binary path by placing malicious executables in the service's file path t...

CVE-2019-18242

In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to fail...

CVE-2020-24187

An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service DoS Null Pointer Dereference...

CVE-2023-49759

Cross-Site Request Forgery CSRF vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.3.0...

CVE-2024-39833

Uncontrolled search path for some IntelR QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Amuli versions = 2.3.0...

CVE-2025-55204 muffon has One-click Remote Code Execution via XSS and Custom URL Handling

muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution RCE vulnerability in. An attacker can exploit this issue by embedding a specially crafted muffon:// link on any website they control. When a victim visits the site or clic...

PT-2026-1311

Name of the Vulnerable Software and Affected Versions muffon versions prior to 2.3.0 Description muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a Remote Code Execution RCE issue. An attacker can exploit this by embedding a specially crafted muffon://...

muffon 代码注入漏洞

muffon is a music playback software by Aleksey Shpakovsky Personal Developer. A code injection vulnerability exists in muffon versions prior to 2.3.0, which stems from mishandling of specially crafted muffon links that could lead to remote code execution...

CVE-2025-65000

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

CVE-2025-65000

CVE-2025-65000 affects Checkmk (Linux Remote alert handlers rule). SSH private keys were exposed in the HTML source of the rule page for Checkmk 2.3.0 and all versions up to 2.4.0p18, potentially allowing unauthorized triggering of predefined alert handlers on affected hosts. The Red Hat, NVD, Ub...

Deserialization of Untrusted Data

Overview isaaclab is an Isaac Lab Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can achieve arbitrary code execution by providing specially crafted data to be deserialized. Details Serialization is a process of...

EUVD-2023-27815

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.3.0...

PT-2025-50095

Name of the Vulnerable Software and Affected Versions Brainstorm Force Spectra versions through 2.3.0 Description A missing authorization issue exists in Brainstorm Force Spectra, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Brainstorm...

EUVD-2025-198047

Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions 2.2.0, 2.3.0, and 2.4.0 up to and including 2.4.0p16, which stems from insufficient validation of REST API endpoint privileges and could lead to unauthorized actions or information disclosu...

Malicious code in node-calculator-f4d5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342de6f4f54c5a0a4df856c6dc87100b08337f11e82519b0cc2e99c90b26c9f0 The package node-calculator-f4d5 was found to contain malicious code. Source: ossf-package-analysis...