17307 matches found
EUVD-2025-198350
Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system...
CVE-2025-52669
Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system...
CVE-2025-52669
CVE-2025-52669 concerns Revive Adserver prior to or at 6.x, where the user management design allows non-admin users to see other users’ contact names and email addresses. The root cause is an insecure design in the User Management / Add user lookup workflow that performs a global account search, ...
EUVD-2025-198331
Malicious code in @ra-ftds/ra-flourish-design-tokens npm...
MAL-2025-190588 Malicious code in @ra-ftds/ra-flourish-design-tokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72b65d4ce1abb0b35aca62b21968c19b6e8e99ec60962be31a4179ba5f22bec The package @ra-ftds/ra-flourish-design-tokens was found to contain malicious code. Source: ossf-package-analysis...
GNU Transport Layer Security Library 3.8.11
GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS 12, OpenPGP, and other...
Mozilla Firefox < 53.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 53.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-10 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 ...
CVE-2025-13289
A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...
What It Takes to Design Trust into Event-Driven Architectures with Amazon EventBridge
How disciplined design turns Amazon EventBridge from an open event bus into a system of verified trust. Event-driven architecture has become essential for achieving agility in the cloud. Yet as integrations multiply, so do the hidden pathways that adversaries can exploit. Amazon EventBridge helps...
CVE-2025-13289: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...
VEIL: Jailbreaking Text-To-Video Models Via Visual Exploitation from Implicit Language
Jailbreak attacks can circumvent model safety guardrails and reveal critical blind spots. Prior attacks on text-to-video T2V models typically add adversarial perturbations to obviously unsafe prompts, which are often easy to detect and defend. In contrast, we show that benign-looking prompts...
Human-Centered Threat Modeling in Practice: Lessons, Challenges, and Paths Forward
Human-centered threat modeling HCTM is an emerging area within security and privacy research that focuses on how people define and navigate threats in various social, cultural, and technological contexts. While researchers increasingly approach threat modeling from a human-centered perspective,...
EUVD-2025-179253
Malicious code in dotenv-semantic-ui-fusion-hexo npm...
EUVD-2025-178895
Malicious code in firebase-antd-lyra-version npm...
EUVD-2025-175979
Malicious code in testcafe-jsonp-lyra-antd npm...
A Bootiful Podcast: The legendary Bruce Eckel on language design, effects, abstraction, concurrency, and so much more
Hi, Spring fans! In this installment, I sit down with the legendary Bruce Eckel, who has probably forgotten more about programming languages than I will ever know, and whose book Thinking in Java helped launch me into a career...
EUVD-2025-115235
Malicious code in comet-cygnus-antd-koa npm...
EUVD-2025-112542
Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...