EUVD-2026-60574

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files. The library uses yazl for zip decompression without validating entry sizes, allowing an attacker to supply a malicious .docx file containing a zip bomb that decompresses to a...

CVE-2026-60574

CVE-2026-60574 affects Oracle Content Manager in Oracle E-Business Suite (Cover Letter) versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can achieve unauthorized update/insert/delete and read access, plus partial denial of service. CVSS 3.1 base score 6.3. Oracle CPU...

CVE-2026-60574

...

EUVD-2025-60574

Malicious code in bella-gado-gado14-sluey npm...

CVE-2025-60574

creationtimestamp| type| source ---|---|--- 2025-11-07 23:27:58+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m53a2wf6vyb2...

CVE-2025-60574

A Local File Inclusion LFI vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system...