virtuoso-opensource security update

1:6.1.6-7.0.1 - Back port fix for CVE-2024-57656 Orabug:37856848...

Command Execution Vulnerability in MaxKB at Hangzhou Feizhiyun Information Technology Co.

MaxKB is an open source knowledge base Q&A system based on big language model and RAG under Hangzhou Feizhiyun Information Technology Co. MaxKB has a command execution vulnerability that can be exploited by attackers to execute commands...

SeaCMS security vulnerabilities

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from mishandling of the adminmanager.php component, which could lead to SQL...

Retrieval-based-Voice-Conversion-WebUI Code Injection Vulnerability

Retrieval-based-Voice-Conversion-WebUI is an open source voice training modeling tool from RVC-Project. A code injection vulnerability exists in Retrieval-based-Voice-Conversion-WebUI version 2.2.231006 and earlier, which stems from improper handling of the ckptpath2 variable and could lead to...

Kob security vulnerabilities

kob is an open source centralized job scheduling system from Ke Technologies that defines a task scheduling model and enables unified management and monitoring of task scheduling. A security vulnerability exists in kob version v1.0.0, which stems from improper access control of the doFilter...

CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents

🐫 CAMEL is an open-source community dedicated to finding the scaling laws of agents. We believe that studying these agents on a large scale offers valuable insights into their behaviors, capabilities, and potential risks. To facilitate research in this field, we implement and support various type...

[SECURITY] Fedora 40 Update: chromium-136.0.7103.59-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Checkmate security vulnerabilities

Checkmate is an open source, self-hosted tool from BlueWave Open Source designed to track and monitor server hardware, uptime, response time and events in real-time with beautiful visualizations. A security vulnerability exists in Checkmate 2.0.2 and earlier versions, which stems from the fact th...

CVE-2025-46566

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9...

Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database

Automatically generates beautiful and easy-to-read ER diagrams from your database. Website • Documentation • Roadmap What's Liam ERD? Liam ERD generates beautiful, interactive ER diagrams from your database. Whether you're working on public or private repositories, Liam ERD helps you visualize...

[SECURITY] Fedora 42 Update: chromium-136.0.7103.59-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

PQS-BFL: a Post-Quantum Secure Blockchain-Based Federated Learning Framework

Federated Learning FL enables collaborative model training while preserving data privacy, but its classical cryptographic underpinnings are vulnerable to quantum attacks. This vulnerability is particularly critical in sensitive domains like healthcare. This paper introduces PQS-BFL Post-Quantum...

Metasploit Wrap-Up 05/02/2025

Meterpreter Extended API Clipboard Monitoring Security is hard, and Open Source Security is a collaborative effort. This week, Metasploit released a fix for a vulnerability that was privately disclosed to us by long-time community member bcoles. The vulnerability in question impacted Metasploit...

CVE-2025-46332 Information Disclosure via Flags override link

Flags SDK is an open-source feature flags toolkit for Next.js and SvelteKit. Impacted versions include flags from 3.2.0 and prior and @vercel/flags from 3.1.1 and prior as certain circumstances allows a bad actor with detailed knowledge of the vulnerability to list all flags returned by the flags...

BIT-DISCOURSE-2025-32376 Discourse DM limits aren’t always properly enforced

Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable...

[SECURITY] Fedora 41 Update: firefox-138.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ttmboswapout potentially dereferencing a null pointer...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

Itsourcecode Restaurant Management System security vulnerabilities

itsourcecode Restaurant Management System is an itsourcecode open source restaurant management system. A security vulnerability exists in version 1.0 of itsourcecode Restaurant Management System, which is caused by a SQL injection due to incorrect manipulation of the parameter Category in the fil...

Casdoor security vulnerability

Casdoor is an open source platform from Casdoor Open Source that supports multiple authentication and authorization protocols. A security vulnerability exists in Casdoor version 1.811.0 and prior versions that stems from an authorization bypass that could lead to unauthorized access...