13270 matches found
MAL-2025-3498 Malicious code in mydoges (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07750d79aef67972a8effa5d86b39565615c16e1c1be3f28cefd5fc68db57a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SICK FLX0-GPNT100和SICK FLX3-CPUC200 安全漏洞
The SICK FLX0-GPNT100 and SICK FLX3-CPUC200 are both products of SICK, Germany.The SICK FLX0-GPNT100 is a photoelectric sensor for precise object detection and localization in industrial automation.The SICK FLX3-CPUC200 is a high-performance photoelectric sensor controller designed for complex SI...
SQL Injection Vulnerability in Smart Reporting Online Business Hall of Xintian Technology Co.
Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Reporting Online Business Office of Xintian Technology Company Limited, which can be exploited by attackers to obtain sensitive...
Books-Management-System 安全漏洞
Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from an incorrect operation of the file /admin/article/list resulting in a missing authorization...
Karaz Karazal 安全漏洞
Karaz Karazal is an innovative digital platform from Karaz that provides intelligent business solutions and services. A security vulnerability exists in Karaz Karazal version 2025-04-14 and earlier, which stems from a parameter lang leading to reflective cross-site scripting...
CVE-2024-42177
HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system...
CVE-2024-30152 HCL SX is affected by usage of a weak cryptographic algorithm
HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts...
CVE-2025-3625
A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication 2FA...
Sherpa Orchestrator 安全漏洞
Sherpa Orchestrator is an IT management software from Sherpa for automating IT processes and workflow management. A security vulnerability exists in Sherpa Orchestrator version 141851, which stems from the possibility that a low-privileged user could elevate privileges by creating new users and...
Blue Shield Leaked Millions of Patient Info to Google for Years
Blue Shield of California exposed the health data of 4.7 million members to Google for years due to…...
4.7 million customers’ data accidentally leaked to Google by Blue Shield of California
Blue Shield of California leaked the personal data of 4.7 million people to Google after a Google Analytics misconfiguration. The tech giant may have used this data for targeted advertising, according to Blue Shield, which is one of the largest health insurers in the US. In a data breach notice o...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an inadequate default configuration that allows anonymous access to directory information...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from the lack of a no cache header, which could lead to user directory information being cached...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. Centreon suffers from a security vulnerability that originates from SQL injection and could lead to...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap suffers from a security vulnerability that stems from insufficient cleanup and allows injection of client-side scripts in the authoring environment...
Franka Emika Robot 安全漏洞
Franka Emika Robot is a robot from the German company Franka. A security vulnerability exists in Franka Emika Robot that stems from an improper authentication mechanism that allows an unauthenticated, remote attacker to enumerate valid usernames...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an insufficient whitelisting of the URI protocol, which allows scripts to be injected via query parameters...
DOGE Worker’s Code Supports NLRB Whistleblower
A whistleblower at the National Labor Relations Board NLRB alleged last week that denizens of Elon Musk's Department of Government Efficiency DOGE siphoned gigabytes of data from the agency's sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB...
CVE-2025-32968 org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it is possible for a user with SCRIPT right to escape from the HQL execution context and perform a blind SQL injection to execute arbitrary SQL statements on the database backend...