CVE-2025-60934

CVE-2025-60934 affects HR Performance Solutions Performance Pro v3.19.17. Multiple stored XSS vulnerabilities exist in the index.php component, enabling an attacker to inject arbitrary web scripts or HTML via crafted payloads placed in Employee Notes, title, or description parameters. The underly...

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server's RDBMS Functional Index versions 23.4...

CVE-2025-55086

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read...

CVE-2025-55086

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read...

CVE-2025-55086

CVE-2025-55086 affects NetXDuo (Eclipse Foundation ThreadX) prior to v6.4.4. The DHCPV6 client contains an unchecked index when extracting the server DUID from the server reply, enabling a crafted network packet to cause an out-of-memory read. Multiple sources (NVD, Red Hat, OSV, CNNVD, CIRCL) co...

EUVD-2025-35051

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

MAL-2025-191666 Malicious code in yelp-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdea5ca17bb09234a292159e525a2a38ac3fd43760c6f2184aa27f563f320075 During import, the package attempts to exfiltrate potentially sensitive data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

CVE-2025-61456

The CVE-2025-61456 entry documents a reflected XSS in Bhabishya-123 E-commerce 1.0, specifically in the index endpoint. Unescaped input from the /index parameter is echoed into the HTML response, enabling arbitrary JavaScript execution in a user’s browser via a crafted link or request. Affected p...

E-commerce 安全漏洞

E-commerce is a dynamic e-commerce website by the individual developer Bhabishya Ghimire. A security vulnerability exists in E-commerce version 1.0, which stems from the /index parameter not clearing the input to be reflected directly back to the HTML response, which could lead to a cross-site...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

JLSEC-2025-109 FFmpeg through 4.3 has a heap-based buffer overflow in `avio_get_str` in `libavformat/aviobuf.c`...

FFmpeg through 4.3 has a heap-based buffer overflow in aviogetstr in libavformat/aviobuf.c because dnnbackendnative.c calls ffdnnloadmodelnative and a certain index check is omitted...

Malicious code in huzzleuo130 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85df7f2dfe2955a251c0e1858049dab9b978d9812a067235cb04c6ffb25131fc Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191634 Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191655 Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous59101 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a91be6e2afb95f2eeaf8f48eb0bf62bf737ba21ae56aee91c4c75c27a5ba21b Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunaiodio2443 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f8b15e18af91c7aa7c9b3de3f2a24c1dcdca73d75acffdd2c8b6650d1c13657 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...