246 matches found
CVE-2026-23949 jaraco.context Has a Path Traversal Vulnerability
jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the jaraco.context.tarball function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract file...
GHSA-QCFC-HMRC-59X7 Apache Struts 2 is Missing XML Validation
Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue...
PT-2025-53016
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-07460-g7ae9888d6e1c 580 Description A flaw exists in the Linux kernel related to devlink snapshot handling. Specifically, the devlink region snapshot del function does not consistently hold the region lock...
PT-2025-52927
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee Description The Linux kernel contains a use-after-free issue within the mrp Multiple Registration Protocol component. Specifically, a synchronization problem exists in the...
EUVD-2002-2020
Malware in sbrugna...
EUVD-2018-8907
Malware in sbrugna...
EUVD-2013-4056
Malware in sbrugna...
EUVD-2013-4118
Malware in sbrugna...
EUVD-2021-24887
Malware in sbrugna...
EUVD-2022-24517
Malicious code in bioql PyPI...
EUVD-2022-44756
Malicious code in bioql PyPI...
Cross-site Request Forgery (CSRF)
Overview com.liferay.portal:portal-service is a portal service package for Liferay. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the orderUuid parameter in the server license registration process. An attacker can register a server license without...
CVE-2025-10716
A flaw has been found in Creality Cloud App up to 6.1.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cxsw.sdprinter. Executing manipulation can lead to improper export of android application components. It is possible ...
CVE-2025-53940
CVE-2025-53940 affects Quiet, an open-source p2p chat alternative. Vulnerable in Quiet 6.1.0-alpha.4 and earlier due to an insecure, non-constant-time token verification comparison in the backend/frontend API, enabling a timing attack to guess the token character by character. The issue is resolv...
CVE-2025-50481
A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...
PYSEC-2025-137
A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...
OpenC3 COSMOS 安全漏洞
OpenC3 COSMOS is an OpenC3 open source application. A security vulnerability exists in OpenC3 COSMOS versions prior to 6.1.0 that stems from the /script-api/scripts/ endpoint being vulnerable to directory traversal attacks...
PT-2025-18514 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc1 Description: A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the kprobe event gen test exit function. This issue occurs when the trace get event file...
Viayoo Via Browser 安全漏洞
Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A security vulnerability exists in Viayoo Via Browser version 6.1.0, which can be exploited for remote code execution via the mark.via...
