PT-2025-39090

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A flaw exists in the fuyang lipengjun platform that allows for improper authorization. This issue is related to the SysSmsLogController function located in the /sys/smslog/queryAll file. The...

PT-2025-38730

Name of the Vulnerable Software and Affected Versions AiKaan Cloud Controller affected versions not specified Description The AiKaan Cloud Controller utilizes a single, hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an...

WordPress plugin All In One SEO Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

CVE-2025-10676

A weakness has been identified in fuyanglipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be...

CVE-2025-10675

A security flaw has been discovered in fuyanglipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.2) potentially affected by CVE-2025-43809 via com.liferay.portal:com.liferay.portal.impl (3.26.4)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.3) potentially affected by CVE-2025-43809 via com.liferay.portal:com.liferay.portal.impl (4.3.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.1) potentially affected by CVE-2025-43809 via com.liferay.portal:com.liferay.portal.impl (3.22.20)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.22.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.4) potentially affected by CVE-2025-43809 via com.liferay.portal:com.liferay.portal.impl (4.12.11)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

CVE-2025-59349

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses the os.MkdirAll function to create certain directory paths with specific access permissions. This function does not perform any permission checks when a given directory path...

Malicious Package

Overview fast-proxies is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Privilege Defined With Unsafe Actions

org.apache.cassandra, cassandra-all is vulnerable to Privilege Defined With Unsafe Actions. The vulnerability is due to unsafe actions on a system resource, which allow a user with MODIFY permission on all keyspaces to escalate privileges to superuser within an Apache Cassandra cluster...

Cloudflare Workers SDK 信息泄露漏洞

Cloudflare Workers SDK is an open source developer toolkit for Cloudflare. An information disclosure vulnerability exists in Cloudflare Workers SDK versions prior to 1.6.0, which stems from a default configuration where the local development server exposes all files, potentially leading to the...

SUSE CVE-2023-53420

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfslistxattr Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfslistea fs/ntfs3/xattr.c:191 inline BUG: KASAN: slab-out-of-bounds in ntfslistxattr+0x401/0x5...

CVE-2025-10676

A weakness has been identified in fuyanglipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be...

CVE-2025-10676

A weakness has been identified in fuyanglipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be...

CVE-2025-10675

A security flaw has been discovered in fuyanglipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public...

CVE-2025-10674

A vulnerability was identified in fuyanglipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be use...

CVE-2025-10674

A vulnerability was identified in fuyanglipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be use...

CVE-2023-53420 ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfslistxattr Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfslistea fs/ntfs3/xattr.c:191 inline BUG: KASAN: slab-out-of-bounds in ntfslistxattr+0x401/0x5...