CVE-2024-56784

Technical details for CVE-2024-56784 are not provided in the connected documents. The initial description notes a Linux kernel drm/amd/display fix, but explicit affected versions, root cause specifics, exploitability, or remediation are not disclosed here. Monitor for updates.

MAL-2025-1005 Malicious code in wdwq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aefeaeba3d2b87141b1e79dbe4e4294e949aaaf9c07f87182bd20234d611bc66 Starting the module starts a Telegram bot client capable of exfiltrating files when requested --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in wdwq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aefeaeba3d2b87141b1e79dbe4e4294e949aaaf9c07f87182bd20234d611bc66 Starting the module starts a Telegram bot client capable of exfiltrating files when requested --- Category: MALICIOUS - The campaign has clearly malicious...

Rapid7 Recognized with Top Score of 100 in 2025 Corporate Equality Index

On January 7, the Human Rights Campaign Foundation released their 2025 Corporate Equality Index CEI, where Rapid7 earned a top score of 100. The CEI is the nation’s leading benchmark for LGBTQ+ workforce equality, evaluating policies and practices in areas such as non-discrimination, equitable...

CVE-2024-45550

CVE-2024-45550 involves memory corruption when an IOCTL-calling application executes all MCDM driver IOCTL calls on Qualcomm chipsets. The affected component is the MCDM driver IOCTL interface; root cause is memory corruption triggered by IOCTL invocation patterns. Reported impact includes high c...

CVE-2024-45550 Improper Validation of Array Index in DSP Services

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...

CVE-2025-0228

A vulnerability has been found in code-projects Local Storage Todo App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /js-todo-app/index.html. The manipulation of the argument Add leads to cross site scripting. The attack can be initiated remotely. The...

Code-Projects Local Storage Todo App 代码注入漏洞

Code-Projects Local Storage Todo App is an open source local code storage project by Code-Projects. A code injection vulnerability exists in Code-Projects Local Storage Todo App version 1.0, which originates from a cross-site scripting vulnerability contained in the Add parameter in the...

CVE-2025-0206

A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed...

code-projects Online Shoe Store 安全漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store has an Improper Access Control vulnerability that stems from multiple parameters in the /admin/index.php page containing an improper access control vulnerability. No details of the vulnerability are available at this time...

Campcodes School Faculty Scheduling System 安全漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes, Inc. A security vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter page in the file /admin/index.php that causes the file to include...

OpenCart 注入漏洞

OpenCart is a set of open source e-commerce system from China OpenCart team. The system provides product reviews, product ratings, product additions and other modules. An injection vulnerability exists in OpenCart version 4.0.0.1, which originates from the parameter headermenuid in the...

PT-2025-30780

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The i2c dw xfer init function requires msgs and msg write idx from the device context to be initialized. A flaw exists because amd i2c dw xfer quirk initializes msgs and msgs num, but no...

PT-2025-53817

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge related to the parsing of SFD files. Insufficient validation of user-supplied data can lead to a write past the end of an allocated array, potentially allowing a...

PT-2026-26043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A specially crafted dentry within the ntfs3 filesystem can cause the kernel to hang during look...

SQLite report about CVE-2025-7709

An attacker who has complete control over the database content could create a corrupt FTS5 index resulting access to memory outside the bounds of an array due to integer overflow. Fixed on 2025-07-15...

PT-2025-53659

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.4.9 GnuPG versions 2.2.51 and earlier Description The issue resides in the armor filter function within the g10/armor.c file. A flaw exists due to two increments of an index variable where only one is intended. This...

PT-2025-37331

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to the handling of Security Parameter Index SPI values within the XFRM framework. Specifically, the xfrm alloc spi function may return success...

CVE-2024-13078

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit h...

MAL-2025-974 Malicious code in requetses (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d43e83ac1c0257aa1168edf9c20430524b46520f60a5f5a0c0e1c2040afa0c87 Under a typosquatting name there is a package prepared to exfiltrate photos from a phone, although it requires external trigger. --- Category: MALICIOUS - The...