22683 matches found
SUSE-SU-2025:02977-1 Security update for kubernetes1.18
This update for kubernetes1.18 fixes the following issues: - Update to version 1.18.20: - CVE-2021-3121: Fixed a lack of certain index validation in plugin/unmarshal/unmarshal.go. bsc1182185...
Malicious code in enumeratiam (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9bcbc4cde02af001776bd6812c42586311baa3d29fc13a5800760297af961041 Package acts as dependency that exfiltrates credentials data while creating a boto3 client --- Category: MALICIOUS - The campaign has clearly malicious intent,...
CVE-2025-55409
FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...
PT-2025-34666 · Foxcms · Foxcms
Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: FoxCMS version 1.2.6 contains a Cross Site Scripting issue in the /index.php/article endpoint. This allows attackers to execute arbitrary code. Recommendations: As a temporary workaround, consider restricting...
PT-2025-34665
Name of the Vulnerable Software and Affected Versions: run-llama/llama index versions prior to 0.12.38 Description: A denial of service issue exists in the JSONReader component. The issue is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting i...
Linux Distros Unpatched Vulnerability : CVE-2017-3163
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However,...
CVE-2025-55409
FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2016-10202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to...
CVE-2024-46413
Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreControllerloadDataIndex method...
CVE-2025-56214
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter...
PT-2025-34699
Name of the Vulnerable Software and Affected Versions: GreenCMS versions prior to 2.3.0604 Description: A vulnerability exists in GreenCMS that allows for unrestricted file upload. The issue is located in an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. Manipulation of the...
CVE-2025-56214
The CVE-2025-56214 entry concerns phpgurukul Hospital Management System 4.0, which is vulnerable to SQL Injection in index.php via the username parameter. The vulnerability stems from unsafely handling user input in a PHP/MySQL context, enabling potentially arbitrary SQL execution with a base CVS...
PT-2025-34668 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: phpgurukul Hospital Management System version 4.0 Description: The phpgurukul Hospital Management System is susceptible to SQL Injection via the username parameter in the index.php file. Recommendations: As a temporary workaround, sanitize th...
Linux Distros Unpatched Vulnerability : CVE-2016-10201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in...
Linux Distros Unpatched Vulnerability : CVE-2015-8856
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a...
Rebuild 安全漏洞
Rebuild is a highly customizable enterprise management system from getrebuild open source. A security vulnerability exists in Rebuild version v3.7.7, which stems from a server-side request forgery in the type parameter of the com.rebuild.web.admin.rbstore.RBStoreControllerloadDataIndex method...
FoxCMS 安全漏洞
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.6, which originates from the presence of cross-site scripting in index.phpparticle, which may lead to the execution of arbitrary code...
CVE-2024-46413
CVE-2024-46413 concerns Rebuild v3.7.7, where the SSRF vulnerability is triggered via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex function. The issue originates in the RBStoreController loadDataIndex path and exposes the system to server-side requests t...
CVE-2025-55409
CVE-2025-55409 concerns FoxCMS 1.2.6, which has a Cross-Site Scripting vulnerability in the /index.php/article endpoint that can lead to arbitrary code execution. Technical details across sources specify the affected software and component, and the underlying issue is a reflected/persistent XSS i...