39499 matches found
CVE-2025-64500
Affected component: Symfony HttpFoundation (Symfony PHP framework). Vulnerability: The Request class improperly interprets some PATH_INFO, allowing representation of URLs without a leading slash and potentially bypassing access-control rules that assume a leading “/”. Versions and root cause: Pri...
USN-7835-6: Linux kernel (AWS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
USN-7835-6 linux-aws-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
CVE-2025-41106
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'firstname' in '/clients/savecontact/'...
CVE-2025-41104
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'customfield1' in '/estimaterequests/saveestimaterequest'...
CVE-2025-41103
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...
CVE-2025-5718
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP...
EUVD-2025-122251
Malicious code in sass-loader-jovian-axios-framework npm...
EUVD-2025-112208
Malicious code in jekyll-framework-meteor-dotenv-safe npm...
EUVD-2025-124385
Malicious code in node-sass-eleventy-framework-postcss-loader npm...
EUVD-2025-122024
Malicious code in server-framework-andromeda-aurora npm...
EUVD-2025-111566
Malicious code in loopback-framework-loopback-janus npm...
EUVD-2025-113010
Malicious code in grus-remark-transport-framework npm...
EUVD-2025-113429
Malicious code in framework-hapi-sequelize-jovian npm...
EUVD-2025-114391
Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework npm...
EUVD-2025-111713
Malicious code in link-bootes-framework-javascript npm...
EUVD-2025-112174
Malicious code in jest-wezen-corvus-nuxtjs npm...
Malicious code in framework-halley-phoebe-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...