CVE-2025-41047 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/ace...

PT-2025-35918

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is triggered through the dataAddonlayouts and dataAddonlayouts except...

appRain CMF 跨站脚本漏洞

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...

KLA87209 ACE vulnerability in Microsoft Browser

Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-9478 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-9478 critical KB li...

Linux Distros Unpatched Vulnerability : CVE-2021-27022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should...

KLA86970 ACE vulnerability in Google Chrome

ACE vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list CVE-2025-9478 critical...

Linux Distros Unpatched Vulnerability : CVE-2014-6311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

Malicious code in ace-one-widget-self-hosting (npm)

The package ace-one-widget-self-hosting was found to contain malicious code...

Malicious code in redux-ace (npm)

The package redux-ace was found to contain malicious code...

MAL-2025-31949 Malicious code in redux-ace (npm)

The package redux-ace was found to contain malicious code...

MAL-2025-13992 Malicious code in ace-one-widget-self-hosting (npm)

The package ace-one-widget-self-hosting was found to contain malicious code...

Malicious Package

Overview redux-ace is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)

None None...

MAL-2025-6690 Malicious code in ace-widgets (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ace-widgets (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53534

creationtimestamp| type| source ---|---|--- 2025-08-04 08:08:50+00:00| published-proof-of-concept| https://github.com/acepanel/panel/security/advisories/GHSA-fm3m-jrgm-5ppg...

KLA85940 ACE vulnerability in Opera

ACE vulnerability was found in Opera. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Opera 120 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...

KLA85873 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Insufficient validation of untrusted input vulnerability in ANGLE can be exploited remotely t...

CVE-2025-21082 arkui_ace_engine has a type confusion vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion...

CVE-2025-21082

CVE-2025-21082 affects OpenHarmony v5.0.3 and earlier, with a type confusion vulnerability in the arkui_ace_engine that can cause local apps to crash. The issue is described as a local, low-privilege, low-complexity condition with availability impact (crash) and no confidentiality/integrity impac...