20144 matches found
ROS-20251007-03
The vulnerability of the high-performance open source DNS server PowerDNS Recursor is related to a a bug in the ECS implementation. Exploitation of the vulnerability could allow an attacker acting remotely, perform cache poisoning attacks...
Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way...
Flowise 安全漏洞
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from an unfiltered IFRAME element and could lead to a cross-site scripting attack...
[SECURITY] Fedora 43 Update: firefox-143.0.3-1.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CRMEB 安全漏洞
CRMEB is a Java mall system of CRMEB open source. A security vulnerability exists in CRMEB 5.6 and earlier versions, which stems from an incorrect manipulation of the parameter cateid in the file /adminapi/product/product, which could lead to a SQL injection attack...
Security Analysis of Ponzi Schemes in Ethereum Smart Contracts
The rapid advancement of blockchain technology has precipitated the widespread adoption of Ethereum and smart contracts across a variety of sectors. However, this has also given rise to numerous fraudulent activities, with many speculators embedding Ponzi schemes within smart contracts, resulting...
编号撤回
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
ZKEACMS 授权问题漏洞
ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...
编号撤回
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
AI Verger 代码问题漏洞
AI Verger is an AI chat tool open-sourced by Le Chatterie. A code issue vulnerability exists in AI Verger version 1.2.10 and earlier, which stems from incorrect manipulation of the parameter URLs in the file /src/main/services/mcp/oauth/provider.ts, which could lead to a deserialization attack...
EUVD-2024-0824
Malicious code in bioql PyPI...
EUVD-2023-2034
Malicious code in bioql PyPI...
EUVD-2025-21718
Malicious code in bioql PyPI...
EUVD-2024-1202
Malicious code in bioql PyPI...
EUVD-2024-0264
Malicious code in bioql PyPI...
EUVD-2022-52761
Malicious code in bioql PyPI...
EUVD-2023-1001
Malicious code in bioql PyPI...
EUVD-2022-7428
Malicious code in bioql PyPI...