OESA-2025-1957 freetype security update

Security Fixes: ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.CVE-2022-31782...

OESA-2025-1956 freetype security update

Security Fixes: ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.CVE-2022-31782...

VulnCheck KEV: CVE-2024-29198

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. It possible to achieve Service Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. Upgrading to GeoServer 2.24.4, or 2.25.2, removes the...

Malicious code in demo-vault-backup-webapp (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6281 Malicious code in demo-vault-backup-webapp (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in realtime-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25e65ca84d64481a7631998dd140a2b8cecaa7b5716bb71dc08ff53e700a10aa The OpenSSF Package Analysis project identified 'realtime-demo' @...

Malicious code in so-demo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in dashboard-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d421eea33f3a5072db15cff1f0c190af64dc4e7d8963bb2eb8a32d6ac855945d Any computer that has this package installed or running should be considered...

MAL-2025-5807 Malicious code in dashboard-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d421eea33f3a5072db15cff1f0c190af64dc4e7d8963bb2eb8a32d6ac855945d Any computer that has this package installed or running should be considered...

Malicious code in on-off-ramp-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6976f60e83349939cda55fa116d6f3df6d085aea3969653b767ba47863deff Any computer that has this package installed or running should be considered...

Malicious code in onramp-demo-mobile (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 126a99667f6fc4e7bf8fe4a326ada712703d5aaef88ea752eefb365a6157b1a9 Any computer that has this package installed or running should be considered...

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (0.6.2)

@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....

Online Hotel Reservation System demo.php File SQL Injection Vulnerability

Online Hotel Reservation System is a simple online hotel reservation system. Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Start in the file /reservation/demo.php. The...

Malicious code in demo-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7efb62b6588eae7ef14f94a8669af77aca640e90b4677dfcddbba8cce6ad547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-6530

A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown part of the file demo.sh of the component Telnet Service. The manipulation leads to denial of service. Access to the local network is required for this attack. The complexity of ...

CVE-2025-6457

A vulnerability, which was classified as critical, was found in code-projects Online Hotel Reservation System 1.0. This affects an unknown part of the file /reservation/demo.php. The manipulation of the argument Start leads to sql injection. It is possible to initiate the attack remotely. The...

Code-Projects Simple Online Hotel Reservation System 安全漏洞

Online Hotel Reservation System is a simple online hotel reservation system. Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Start in the file /reservation/demo.php. The...

Malicious code in frontend-tests-demo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5410 Malicious code in frontend-tests-demo (npm)

The package communicates with a domain associated with malicious activity...

WordPress Axle Demo Importer plugin file upload vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file upload vulnerability exists in the WordPress Axle Demo Importer plugin that stems from an unverified uploaded file, which can be exploited by an attacker to cause arbitra...