7872 matches found
UBUNTU-CVE-2025-59935
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch...
EUVD-2025-203801
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payload through the inventory endpoint. Users should upgrade to 10.0.21 to receive a patch...
Perch CMS 安全漏洞
Perch CMS is a content management system from Perch. A security vulnerability exists in Perch CMS version 3.2 that stems from allowing authenticated administrators to upload arbitrary PHP files through the asset management interface, which could lead to remote code execution...
The vulnerability in the function Q3DImporter::InternReadFile of the assimp/code/AssetLib/Q3D/Q3DLoader.cpp import library of the Open Asset Import Library (Assimp), which allows a hacker to trigger a service denial.
The vulnerability of the Q3DImporter::InternReadFile function in the assimp/code/AssetLib/Q3D/Q3DLoader.cpp file of the 3D-model import library from the Open Asset Import Library Assimp is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service...
Build a Proactive Vulnerability Management Program
You wouldn't build a fortress without a blueprint. Yet, many organizations approach cybersecurity by simply buying tools—the digital bricks and mortar—without a clear plan for how they all fit together. This leaves gaps in your defenses that attackers are quick to find. A vulnerability management...
Hitachi Energy Asset Suite
SUMMARY Hitachi Energy is aware of a Jasper Report vulnerability that affects the Asset Suite product versions mentioned in this document below. This vulnerability can be exploited to carry out remote code execution RCE attack on the product. Please refer to the Recommended Immediate Actions for...
Rating The Best Vulnerability Management Tools for Security Pros
A home security system doesn't just tell you that a window is unlocked; it tells you which window, whether someone is actively trying to open it, and in which room your most valuable possessions are stored. It gives you the context to act decisively. Similarly, a modern vulnerability management...
What Is Threat Exposure Management? A CISO’s Guide
Trying to secure your organization without understanding an attacker’s perspective is like trying to defend a castle without knowing where the enemy will strike. You can patch walls all day, but you might miss the one weak spot they’re planning to exploit. Threat exposure management gives you tha...
RHEL 10 : qt6-qtquick3d (RHSA-2025:22663)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:22663 advisory. The Qt 6 Quick3D library. Security Fixes: assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277...
CVE-2025-62155
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applie...
ALSA-2025:22361 Moderate: qt6-qtquick3d security update
The Qt 6 Quick3D library. Security Fixes: assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...
📄 Craft CMS 5.0 Authentication Session Path Exposure
Proof of concept exploit that demonstrates an authentication session path exposure vulnerability in Craft CMS version 5.0. ============================================================================================================================================= | Title : Craft CMS 5.0...
Intercom MaLion Security Point 安全漏洞
Intercom MaLion Security Point is an asset management and information leakage prevention software from Intercom Japan. A security vulnerability exists in Intercom MaLion Security Point that stems from a stack buffer overflow when processing HTTP headers, which could lead to the execution of...
The vulnerability of the IBM Maximo Asset Management software system’s programming system relates to the ability to bypass authentication due to a fundamental error. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the IBM Maximo Asset Management software system management program involves bypassing authentication due to a fundamental error. Exploiting this vulnerability allows an attacker to remotely circumvent security restrictions and gain unauthorized access to protected information...
Malicious code in parcel-plugin-asset-copier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344955077c61592ec46c29550b12878886b0b61f3a7c84e050d6d25756f60bf2 The package parcel-plugin-asset-copier was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199059
Malicious code in parcel-plugin-asset-copier npm...
MAL-2025-190984 Malicious code in parcel-plugin-asset-copier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344955077c61592ec46c29550b12878886b0b61f3a7c84e050d6d25756f60bf2 The package parcel-plugin-asset-copier was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
PT-2025-47975
Name of the Vulnerable Software and Affected Versions New API versions prior to 0.9.6 Description New API is a large language model LLM gateway and artificial intelligence AI asset management system. A Server-Side Request Forgery SSRF condition existed in versions prior to 0.9.6. A previous...
