4752 matches found
CVE-2025-55299 VaulTLS has a password-based login exploit in additional user accounts
VaulTLS is a modern solution for managing mTLS mutual TLS certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the...
CVE-2025-9100
A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The attack can be initiated remotely. The...
CVE-2025-9100 zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay
A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The attack can be initiated remotely. The...
My-Blog 安全漏洞
My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A security vulnerability exists in My-Blog version 1.0.0, which stems from the lack of protection...
PT-2025-33629 · Zhenfeng13 · Myblog
Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog version 1.0.0 Description: A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The...
CVE-2025-49267
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through = 3.28.3...
ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
Cybersecurity researchers have detailed the inner workings of an Android banking trojan called ERMAC 3.0, uncovering serious shortcomings in the operators' infrastructure. "The newly uncovered version 3.0 reveals a significant evolution of the malware, expanding its form injection and data theft...
Malicious code in freightsmb-frontend (npm)
The package freightsmb-frontend was found to contain malicious code...
Malicious code in tapioca-frontend-apps (npm)
The package tapioca-frontend-apps was found to contain malicious code...
Malicious code in nightmare-markdownlint-resolvers-frontend (npm)
The package nightmare-markdownlint-resolvers-frontend was found to contain malicious code...
Malicious code in funbox-frontend-env-angular (npm)
The package funbox-frontend-env-angular was found to contain malicious code...
Malicious code in researcher-frontend-synack (npm)
The package researcher-frontend-synack was found to contain malicious code...
MAL-2025-30866 Malicious code in pushek-frontend (npm)
The package pushek-frontend was found to contain malicious code...
MAL-2025-20971 Malicious code in frontend-js-web-component (npm)
The package frontend-js-web-component was found to contain malicious code...
MAL-2025-9564 Malicious code in @tiktok-frontend/app-center-connect (npm)
The package @tiktok-frontend/app-center-connect was found to contain malicious code...
Malicious code in beam-frontend (npm)
The package beam-frontend was found to contain malicious code...
Malicious code in frontend-js-web-component (npm)
The package frontend-js-web-component was found to contain malicious code...
Malicious code in hotline-frontend (npm)
The package hotline-frontend was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...