Growatt Cloud Applications

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to compromise confidentiality, achieve cross-site scripting, or code execution on affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

PT-2025-16434 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue affects the Pluggable authentication module component of Oracle Solaris, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks require hum...

XMall 安全漏洞

XMall is a distributed e-commerce shopping mall based on SOA architecture by an individual developer at Exrick. A security vulnerability exists in XMall 1.1 and earlier versions, which stems from an elevation of privilege in the updateAddress method of the Address Controller class...

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server's RDBMS Listener, which originates from an...

Argo Events 安全漏洞

Argo Events is an event-driven workflow automation framework for Kubernetes open-sourced by Argo Project. A security vulnerability exists in versions prior to Argo Events v1.9.6 that stems from a user with the permission to create or modify EventSource and Sensor can gain privileged access to the...

RHEL 6 : puppet (RHSA-2013:0710)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0710 advisory. Puppet allows provisioning, patching, and configuration of clients to be managed and automated. A flaw was found in how Puppet handled certa...

PeerTube 安全漏洞

PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from path traversal and could lead to the disclosure of arbitrary m3u8 files...

Perforce ALM 安全漏洞

Perforce ALM Helix ALM is an application lifecycle management software from Perforce. A security vulnerability exists in Perforce ALM versions prior to 2025.1 that stems from a different error response being returned during authentication, which could lead to username enumeration...

PT-2025-16468 · Oracle · Peoplesoft Enterprise Cc Common Application Objects

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CC Common Application Objects version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can...

pleezer 安全漏洞

pleezer is a Deezer Connect player by the individual developer Roderick van Domburg. A security vulnerability exists in versions of pleezer prior to 0.16.0, which stems from a hook script that does not properly clean up processes, potentially leading to the accumulation of zombie processes...

Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M

Data breach at Laboratory Services Cooperative LSC exposed the sensitive health and personal information of 1.6 million individuals…...

Sharing Is (Not) Caring: How Shared Credentials Open the Door to Breaches

...

Tutorials Website Employee Management System 安全漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...

Tutorials Website Employee Management System 安全漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...

CVE-2023-42977

CVE-2023-42977 concerns a path-handling issue in Apple platforms that could allow an app to break out of its sandbox. The connected documents specify that the vulnerability affects Apple iOS prior to 17 and iPadOS prior to 17, and macOS Sonoma prior to 14, with the root cause described as a path ...

CVE-2025-31565 WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisandro Martinez WPSmartContracts wp-smart-contracts allows Blind SQL Injection.This issue affects WPSmartContracts: from n/a through = 2.0.12...

Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides features such as firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect, which stems from an issue with a privileg...

SAP NetWeaver AS ABAP Authorization Bypass Vulnerability

The remote SAP NetWeaver ABAP server may be affected by an authorization bypass vulnerability. SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the...

CVE-2025-27892

creationtimestamp| type| source ---|---|--- 2025-04-10 14:38:56+00:00| seen| https://bsky.app/profile/campuscodi.risky.biz/post/3lmhq7wh5zk2w 2025-04-15 22:43:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5megosj2j 2025-04-16 01:49:06+00:00| seen|...

CVE-2025-31331

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper...