567 matches found
CVE-2025-15439 Daptin Aggregate API resource_aggregate.go goqu.L sql injection
A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file server/resource/resourceaggregate.go of the component Aggregate API. The manipulation of the argument column/group/order leads to sql injection. The attack may be initiated remotely...
PT-2026-1108
Name of the Vulnerable Software and Affected Versions Daptin version 0.10.3 Description A flaw exists in Daptin version 0.10.3 within the Aggregate API component. Specifically, the goqu.L function in the server/resource/resource aggregate.go file is susceptible to SQL injection. The issue arises...
daptin SQL注入漏洞
daptin is a content management system from Daptin open source. A SQL injection vulnerability exists in daptin version 0.10.3, which stems from incorrect manipulation of the parameters column/group/order within the file server/resource/resourceaggregate.go in the component Aggregate API, which can...
drm/meson: remove drm bridges at aggregate driver unbind time
...
Linux Distros Unpatched Vulnerability : CVE-2022-50560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/meson: explicitly remove aggregate driver at module unload time Because componentmasterdel wasn't being called when unloading the mesondrm module, the...
kernel: net/sched: sch_qfq: Fix race condition on qfq_aggregate
In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...
Malicious code in aggregate-moccasin-parrot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117518
Malicious code in aggregate-moccasin-parrot npm...
sqlite: Integer Truncation in SQLite
A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available. This issue could lead to memory corruption and subsequent unintended behavior...
EUVD-2025-75051
Malicious code in aggregatebuzzard-silentdev npm...
EUVD-2025-75050
Malicious code in aggregatetyrannosaurus-appteadev npm...
EUVD-2025-75052
Malicious code in aggregatebug-appteadev npm...
EUVD-2025-77798
Malicious code in aggregategazellez3n npm...
EUVD-2025-77797
Malicious code in aggregatemockingbirdz3n npm...
EUVD-2025-79849
Malicious code in aggregateoctopusdumbs npm...
EUVD-2025-79848
Malicious code in aggregateratreplicateautomation npm...
Malicious code in aggregate_lamprey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc5789a80e040d204966d33b0e43dbfc2feb55d15c65d186a6c7a9bbbed5896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-83002
Malicious code in aggregatelampreyz3n npm...
MAL-2025-99242 Malicious code in aggregate_monkey_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a70498975317c18e1cc28d5a5ad8abe792e5f1e3d73546d7976aeb4328183c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...