itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/company/index.php, which could...

CVE-2025-11088

The CVE-2025-11088 entry concerns itsourcecode Open Source Job Portal 1.0. A SQL injection vulnerability exists in the file /admin/vacancy/index.php?view=edit, triggered by manipulation of the ID argument. The issue is exploitable remotely and a public exploit is available. Connected sources (PT-...

CVE-2025-11037

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

GHSA-CR7Q-2W66-HJCM llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

Creation of Temporary File With Insecure Permissions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions via the getcachedir function, which uses a predictable and hardcoded directory path /tmp/llamaindex without proper security...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647

CVE-2025-7647 affects llama-index-core up to version 0.12.44, with a vulnerability in get_cache_dir() that uses a predictable, hardcoded directory path (/tmp/llama_index) on Linux. On multi-user Linux systems, this insecure temporary directory can enable local attackers to steal proprietary model...

CVE-2025-11016

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has...

MAL-2025-48908 Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

SUSE SLES15 Security Update : kernel (SUSE-SU-2025:03382-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03382-1 advisory. The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/category/index.php, which coul...

Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48907 Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

CVE-2025-11040 code-projects Hostel Management System index.php sql injection

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/modusers/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit...

CVE-2025-11037

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...