EUVD-2026-2512

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to reveal the value using browser developer/inspection tools. The affected customers are only those with a password-protected scan workflow connector. This issue affects Y Soft SafeQ ...

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

EUVD-2025-27050

Malicious code in bioql PyPI...

CVE-2025-10027

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

CVE-2025-10027

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

CVE-2025-10027

CVE-2025-10027 affects itsourcecode POS Point of Sale System 1.0. The vulnerability lies in the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php, where manipulation of the scripts parameter enables cross-site scripting (XSS) . It is exploitable remotely and the exploit has ...

CVE-2025-10027 itsourcecode POS Point of Sale System 2512.php cross site scripting

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

CVE-2025-10027 itsourcecode POS Point of Sale System 2512.php cross site scripting

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

PT-2025-36334

Name of the Vulnerable Software and Affected Versions: itsourcecode POS Point of Sale System version 1.0 Description: A cross site scripting issue exists due to the manipulation of the scripts argument. This can be initiated remotely and affects some unknown functionality of the file...

CVE-2023-2512

Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a...

CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

CVE-2025-2512

creationtimestamp| type| source ---|---|--- 2025-03-19 12:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkq7dekjnl2g 2025-03-19 14:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwt3gxm2n 2025-03-19 14:38:47+00:00| seen|...

CVE-2025-2512 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function

The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

CVE-2009-2512

creationtimestamp| type| source ---|---|--- 2025-01-21 17:00:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2424...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2512)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 9 : file (RLSA-2024:2512)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2512 advisory. - File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: File is the name of an Open Source project. CVE-2022-48554 Note that Ness...

Oracle Linux 9 : file (ELSA-2024-2512)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2512 advisory. - Fix stack-based buffer over-read in filecopystr CVE-2022-48554 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 9 : file (RHSA-2024:2512)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2512 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types,...