GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in versions prior to GT Edge AI v2.0.10-dev, which stems from improper access control of the /api/v1/conversations//messages API, which could lead to unauthorized access to other users' message history...

How Threat Intelligence Transforms Vulnerability Management

Your security team isn't just fixing technical flaws; they're protecting the business from tangible risks. The problem is, a list of thousands of CVEs doesn't communicate business impact very well. It’s just noise until you can connect a vulnerability to a potential outcome. Threat intelligence...

Malicious code in usage-tracker-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8998ae7ec51b23bfdefe724e7c4bc34ad623362708f171a1c3ffcf4e98be15e0 The package usage-tracker-janus was found to contain malicious code. Source: ghsa-malware...

Palantir Gaia 安全漏洞

Palantir Gaia is a real-time map-based collaborative environment from US-based Palantir. A security vulnerability exists in Palantir Gaia that stems from exposing multiple unauthenticated endpoints, which could lead to unauthorized access...

Mintlify 安全漏洞

Mintlify is an AI-powered documentation platform from US-based Mintlify. A security vulnerability exists in versions of Mintlify prior to 2025-11-15, which stems from not validating the repository owner in the GitHub Integration API, potentially leading to the disclosure of sensitive information...

pretix-offlinesales 安全漏洞

pretix-offlinesales is an extension plugin for a ticketing system from pretix Germany. A security vulnerability exists in pretix-offlinesales that stems from an API endpoint that allows access to sensitive files via UUID, which could lead to unauthorized data access...

Galette 安全漏洞

Galette is a Galette open source membership management web application for non-profit organizations. A security vulnerability exists in Galette version 1.1.4 through versions prior to 1.2.0, which stems from the possibility that group administrators may bypass restrictions on contributions and...

pretix 安全漏洞

pretix is a ticketing software that cares about your event all the way from pretix Germany. A security vulnerability exists in pretix that stems from multiple API endpoints that allow access to sensitive files via UUID, which could lead to unauthorized data access...

New Microsoft e-book: 3 reasons point solutions are holding you back

While patchwork tools slow defenders down and impact visibility into potential cyberthreats, they’re an unfortunate reality for many organizations. As digital risk accelerates and attack surfaces multiply, security leaders are doing their best to stitch together point solutions while trying to...

North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft

Threat actors with ties to the Democratic People's Republic of Korea DPRK or North Korea have been instrumental in driving a surge in global cryptocurrency theft in 2025, accounting for at least $2.02 billion out of more than $3.4 billion stolen from January through early December. The figure...

Utarit SoliClub 安全漏洞

Utarit SoliClub is a mobile application from Utarit, Inc. A security vulnerability exists in Utarit SoliClub versions prior to 5.3.7, which stems from the disclosure of private personal information and may result in the querying of system information...

UPF 安全漏洞

UPF is an open source user interface from the Aether SD-Core Project. A security vulnerability exists in UPF that originates from an out-of-bounds read while processing a PFCP session establishment request containing an empty or truncated IPv4 address field, which could result in a denial of...

UPF 安全漏洞

UPF is an open source user interface from the Aether SD-Core Project. A security vulnerability exists in UPF upf-epc-pfcpiface:version 2.1.3-dev, which stems from a buffer out-of-bounds read while processing a PFCP session establishment request containing a malformed stream description, which cou...

twittodon 安全漏洞

twittodon is a website page for to3k individual developers. A security vulnerability exists in twittodon b1c58a7d1dc664b38deb486ca290779621342c0b, which stems from improper deserialization of the obj parameter in the download.php script, which could lead to a denial of service attack...

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an access control bypass vulnerability that can be exploited by an attacker to cause an account takeover...

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload...

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an information disclosure vulnerability that originates in the Live Site Part Properties dialog box that could disclose sensitive system objects and can be exploited by an attacker to cause unauthorize...

WordPress plugin Restaurant Menu by MotoPress 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Restaurant Menu by...

Ollama 安全漏洞

Ollama is a large language model that can be started and run locally from the Ollama open source. A security vulnerability exists in Ollama v0.12.3 and prior versions that stems from an authentication bypass that could lead to unauthorized model management operations...

CVE-2025-68112 ChurchCRM has SQL injection in EditEventAttendees.php

ChurchCRM is an open-source church management system. In versions prior to 6.5.3, a SQL injection vulnerability in ChurchCRM's Event Attendee Editor allows authenticated users to execute arbitrary SQL commands, leading to complete database compromise, administrative credential theft, and potentia...