19523 matches found
Wave Terminal 路径遍历漏洞
Wave Terminal is an enterprise collaboration system from the Wave Terminal open source. A path traversal vulnerability exists in Wave Terminal, which stems from a path traversal in the alog script that could result in reading or deleting files...
HAL -- an Open-Source Framework for Gate-Level Netlist Analysis
HAL is an open-source framework for gate-level netlist analysis, an integral step in hardware reverse engineering. It provides analysts with an interactive GUI, an extensible plugin system, and APIs in both C++ and Python for rapid prototyping and automation. In addition, HAL ships with plugins f...
Allsky Camera 安全漏洞
Allsky Camera is an Allsky open source camera system for photographing and monitoring the entire sky. A security vulnerability exists in Allsky Camera version v2024.12.0606, which originates from path traversal and could lead to arbitrary command execution...
Grassroot DICOM 安全漏洞
Grassroot DICOM is a Sourceforge open source C++ library for DICOM medical files. A security vulnerability exists in Grassroot DICOM version 3.024, which stems from an out-of-bounds read in the Overlay function that could lead to information disclosure...
PimpMyLog 安全漏洞
PimpMyLog is an open source log file viewer and analysis tool from Potsky, France. A security vulnerability exists in PimpMyLog version 1.7.14, which stems from improper access control and could allow a remote attacker to create an administrator account and inject malicious JavaScript...
abp 安全漏洞
abp is an ABP open source web application framework. A security vulnerability exists in abp version 5.1.0 through versions prior to 10.0.0-rc.2, which stems from failure to properly validate the returnUrl parameter, which could result in a redirect to an arbitrary external domain...
GLPI 安全漏洞
GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
InvoicePlane 安全漏洞
InvoicePlane is an application from InvoicePlane Open Source. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. InvoicePlane suffers from a security vulnerability that stems from improper access control and could lead to invoice data leakag...
GO-2025-4238 Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate
Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate...
EUVD-2025-203371
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization flaw in card update handling allows board members and potentially other authenticated users to add/remove arbitrary user IDs in vote.positive / vote.negative arrays, enabling vo...
[SECURITY] Fedora 43 Update: firefox-146.0-3.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
itsourcecode Online Cake Ordering System SQL注入漏洞
itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which originates from the incorrect manipulation of the parameter Product in the file...
Code-Projects Student File Management System 代码注入漏洞
Student File Management System is a student file management system. Student File Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file /admin/updatestudent.php, which can be exploited by a...
crossbow-agent
🤖 crossbow-agent - The Smart Way to Secure Your System 🚀 G...
Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads
Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan RAT dubbed PyStoreRAT. "These repositories, often themed as development utilities or OSINT tools,...
New PyStoreRAT Malware Targets OSINT Researchers Through GitHub
A new malware called PyStoreRAT is being through fake OSINT tools on GitHub targeting IT and OSINT pros. Read Morphisec's report detailing how it uses AI and evades security...
CVE-2025-65995
creationtimestamp| type| source ---|---|--- 2025-12-12 15:00:38+00:00| seen| https://seclists.org/oss-sec/2025/q4/271 2025-12-12 16:31:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7sj7clvqm24...
CVE-2025-66388
creationtimestamp| type| source ---|---|--- 2025-12-12 14:58:13+00:00| seen| https://seclists.org/oss-sec/2025/q4/270 2025-12-12 16:36:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7sjibnppw2e 2025-12-15 13:44:35+00:00| seen|...