33408 matches found
EUVD-2025-204939
Malicious code in bignumberx npm...
EUVD-2025-204940
Malicious code in baidu-src-test4 npm...
EUVD-2025-204941
Malicious code in auth-handler npm...
EUVD-2025-204942
Malicious code in assert-json-not npm...
EUVD-2025-204953
Malicious code in @ads-core/types npm...
EUVD-2025-204776
Not used...
EUVD-2025-204771
A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...
EUVD-2025-204857
Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switchstatus function...
EUVD-2025-204802
A reflected Cross-Site Scripting XSS vulnerability has been identified in TechStore version 1.0. The username endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser...
EUVD-2025-204764
Malicious code in mw-frontend-utils npm...
EUVD-2025-204763
Malicious code in ro-mobile npm...
EUVD-2025-204765
Malicious code in mui-wrapper-core npm...
EUVD-2025-204766
Malicious code in ivx-cloud-client-v1 npm...
EUVD-2025-204747
ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...
EUVD-2025-204742
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles...
EUVD-2025-204728
In the Linux kernel, the following vulnerability has been resolved: comedi: pcl818: fix null-ptr-deref in pcl818aicancel Syzbot identified an issue 1 in pcl818aicancel, which stems from the fact that in case of early device detach via pcl818detach, subdevice dev-readsubdev may not have initialize...
EUVD-2025-204718
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix possible deadlock in the deferredirqworkfn For PREEMPTRT=y kernels, the deferredirqworkfn is executed in the per-cpu irqwork/ task context and not disable-irq, if the rq returned by containerof is current CPU's rq,...
EUVD-2025-204723
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...