MAL-2025-51626 Malicious code in eka-brongkos63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b061688768303e7260496080a3ff3c75d448ea6b4644350ea1dc10330ec925 The package eka-brongkos63-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50417 Malicious code in fauzi-lapis80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c976a1aa3439f5ed414f6953a56d5e1e5743a8f613f44f8d870131217201d9d The package fauzi-lapis80-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

CVE-2025-12865

creationtimestamp| type| source ---|---|--- 2025-11-10 03:01:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5an2ehh7324 2025-11-10 03:51:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5apsrr3s42b 2025-11-10 06:25:17+00:00| seen|...

CVE-2025-63497

The patient prescription viewing functionality in hisdocviewsinglepatient.php of rickxy Hospital Management System version 1.0 contains an SQL injection vulnerability. The patnumber GET parameter is directly concatenated into SQL queries without proper sanitization, allowing authenticated attacke...

PT-2025-45604

Name of the Vulnerable Software and Affected Versions Jumo variTRON300 affected versions not specified Description A flaw exists in the password generation algorithm when accessing the debug interface. An unauthenticated local attacker who knows the password generation timeframe may be able to...

PT-2025-46180

Name of the Vulnerable Software and Affected Versions rickxy Hospital Management System version 1.0 Description The patient prescription viewing functionality within the his doc view single patient.php component contains an SQL injection issue. The pat number GET parameter is directly incorporate...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. A security vulnerability exists in Hospital Management System version 1.0, which stems from the GET parameter patnumber not being properly cleaned in the file...

EUVD-2025-38441

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure setent is always present Ensure that setent is always set since only drbg provides it...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not ensuring that setent is always present, which could lead to problems with cryptographic random number...

CGA-G7JX-XWG7-7R53

Bulletin has no description...

CVE-2025-12863

Rejected reason: This CVE was assigned for a libxml2 issue1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012note2608283...

CVE-2025-55342

Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiarpasswordolvidovalidar.php txtlogin parameter...

EUVD-2025-38204

EUVD-2025-38204...

EUVD-2025-38200

EUVD-2025-38200...

CVE-2025-11219

Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-38163

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

EUVD-2025-38162

MQTT does not validate hostnames...

EUVD-2025-38169

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via NetworksController.addNetworkAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

EUVD-2025-38165

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxDeviceController.ajaxDeviceAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

CVE-2025-49393 WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through = 2.3.2...