CVE-2025-66254: External Control of File Name or Path

Unauthenticated Arbitrary File Deletion upgradecontents.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary...

DB Electronica Mozart FM Transmitter 安全漏洞

The DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from the Italian company DB Electronica. A security vulnerability exists in DB Electronica Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000, which originates...

DB Electronica Mozart FM Transmitter 安全漏洞

The DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from the Italian company DB Electronica. A security vulnerability exists in DB Electronica Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000 that originates fr...

CVE-2025-66258: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Stored XSS via crafted filenames injected into patchlist.xml. User-controlled filenames a...

DB Electronica Mozart FM Transmitter 安全漏洞

DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from DB Electronica, Italy. A security vulnerability exists in the DB Electronica Mozart FM Transmitter WEBMOZZI-00287 version, which originates from the presence of reflective cross-site scripting in the...

CVE-2024-44648

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php...

DB Elettronica Screen SFT DAB 600/C 安全漏洞

The DB Elettronica Screen SFT DAB 600/C is a digital audio broadcast transmitter from DB Elettronica, Italy. A security vulnerability exists in DB Elettronica Screen SFT DAB 600/C version 1.9.3 and earlier, which stems from improper access control of the user management API and could lead to the...

EUVD-2025-175371

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi and eval in the FunctionField.php...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990834)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990834 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPIALLOCATEZEROED in acpidbconverttopackage ACPICA commit...

CVE-2025-64529 SpiceDB's WriteRelationships fails silently if payload is too big

SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB server such that...

Malicious code in db-aggregator-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-191713 Malicious code in db-aggregator-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: syft, neuvector-scanner, k8s-device-plugin-fips, rke2-runtime, kubescape-operator, skaffold-fips, rancher-agent, rke2-runtime-fips, podman, eks-distro-fips, rancher, buildah, longhorn-share-manager-fips, prometheus-node-exporter, k9s-fips, spegel-fips, xeol,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: syft, neuvector-scanner, k8s-device-plugin-fips, rke2-runtime, kubescape-operator, skaffold-fips, rancher-agent, rke2-runtime-fips, podman, eks-distro-fips, rancher, buildah, longhorn-share-manager-fips, prometheus-node-exporter, k9s-fips, spegel-fips, xeol,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990613 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989669 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989829 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990134 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the ind...

RHEL 9 : galera and mariadb (RHSA-2025:19584)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19584 advisory. Galera is a fast synchronous multimaster wsrep provider replication engine for transactional databases and similar applications. For more...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cri-tools, manifest-tool, timescaledb-tune, container-object-storage-interface, docker-credential-acr-env, kube-vip-cloud-provider, rancher-telemetry, envconsul, spqr, oras, src-fingerprint, xcover, kube-metrics-adapter, dagdotdev,...