CVE-2025-30747

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2025-50062

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Global Payroll for Core. Supported versions that are affected are 9.2.51 and 9.2.52. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach

This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...

The vulnerability of the Unified Audit component of the Oracle Database Server system allows a perpetrator to gain access to read, modify, and delete information.

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete data...

UnitedHealth-Linked Health Tech Firm Episource Breach Hits 5.4M Patients

Episource breach exposed data of 5.4M patients across the US. Linked to UnitedHealth’s Optum, the health tech firm was hit by a ransomware attack in early 2025...

TECNO tech.palm.id 安全漏洞

TECNO tech.palm.id is a mobile application from TECNO Corporation in China. A security vulnerability exists in TECNO tech.palm.id, which stems from an authentication flaw that could lead to information disclosure...

The Scratch Channel 安全漏洞

The Scratch Channel is a project website of The Scratch Channel open source. A security vulnerability exists in The Scratch Channel, which stems from a code issue in the api/admin.js file that could lead to a cross-site scripting attack...

The vulnerability of the Windows SmartScreen security function in Microsoft Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows SmartScreen security function in Microsoft Windows systems relates to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...

MAL-2025-5869 Malicious code in @gdcorp-commerce/cx-api-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 968087e3c7d66519a171ae24c3ff7965c24df722ea4b818bde5d1045acaba4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5867 Malicious code in @ecommerce-cart-ui/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac1b682b09340a43e74619f9ac55f2be98bfb14eb37a21597fb9f81b46f4161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30760

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.0.0-9.2.9.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2025-5394 Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the aloneimportpackinstallplugin function in all versions up to, and including, 7.8.3. This makes it possible for unauthenticated attackers ...

MAL-2025-5888 Malicious code in ai-audio-descriptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf35a4094455afefae874d2367ecf96babc419a5ff8c0474f68beea08f3177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5893 Malicious code in artifact-registry-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53156ca17e2b337cc206264bd5506b359075734acd01374129803b3eff0732fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DOGE Denizen Marko Elez Leaked API Key for xAI

Marko Elez , a 25-year-old employee at Elon Musk's Department of Government Efficiency DOGE, has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So it should fill all Americans wi...

MAL-2025-5952 Malicious code in react-redirect-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438d7e49a15f42d9c8af314bc225c932e4531c3d028d8e602b578777e203300d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Matomo 安全漏洞

Matomo is a set of website statistics and analytics platform by Matomo team. The platform includes features such as visitor statistics, web analytics, chart generation and SEO optimization. A security vulnerability exists in Matomo versions prior to 3.0.3, which stems from the plugin upload...

Oracle Java SE 访问控制错误漏洞

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE for Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise...

PT-2025-29608 · Oracle · Oracle Siebel Crm

Name of the Vulnerable Software and Affected Versions: Oracle Siebel CRM versions 25.0 through 25.5 Description: An easily exploitable issue exists in the User Interface component of Oracle Siebel CRM, allowing an unauthenticated attacker with network access via HTTP to gain unauthorized read...