22811 matches found
Security update for expat
This update for expat fixes the following issues: - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused by stack overflow by resolving use of recursion bsc1239618 Other fixes: - version update to 2.7.1 jscPED-12500 Bug fixes: 980 989 Restore event pointer...
Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders
Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index PyPI repository that's designed to reroute trading orders placed on the MEXC cryptocurrency exchange to a malicious server and steal tokens. The package, ccxt-mexc-futures, purports to be an extensio...
CVE-2023-3609
creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08...
PT-2025-20523
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the bnxt Ethernet driver. The issue arises from a missing ring index trim on the error path, which can cause a crash...
WUZHI CMS 注入漏洞
WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1 version of an injection vulnerability, the vulnerability stems from improper operation of the parameter Setting in the file / index.php, which may lead to code injectio...
CVE-2025-3533
A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated...
PT-2025-16175 · Unknown · Youdiancms
Name of the Vulnerable Software and Affected Versions: YouDianCMS version 9.5.21 Description: A vulnerability has been found in YouDianCMS, affecting an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross-site scripting...
MAL-2025-3443 Malicious code in colorona (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...
Malicious code in colorona (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27014d3a14c4b1df61609aa62f901b3f8cb01f4898bb729d52d6cd08928555be If the method "SetTerminalColor", imitating colorama package, is called, then the code exfiltrated browser, discord and Minecraft passwords/tokens. --- Categor...
CVE-2025-29389
PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2tab=t2...
MAL-2025-3441 Malicious code in colorina (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...
Malicious code in colorina (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5280fa2df728b98c1eda6d86d4b0fc233d4bd0d58ac17160427e16f1bb154081 Using the "color" function will exfiltrated data like discord tokens, browser-saved passwords and Minecraft access tokens --- Category: MALICIOUS - The campaig...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to an improper validation of the index to access an array, resulting in memory corruption...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to an improper validation of the index to access an array, resulting in memory corruption...
CVE-2025-29389
PbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2tab=t2...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to an improper validation of the index to access an array, resulting in memory corruption...
UBUNTU-CVE-2025-22015
In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...
CVE-2025-21447
CVE-2025-21447 affects Qualcomm Snapdragon chipsets. The issue is memory corruption occurring when processing a device IOCTL call for session control, caused by an underlying vulnerability in the IOCTL handling path. The provided sources (NVD/Red Hat/CVE record and related feeds) confirm the memo...
