[SECURITY] Fedora 42 Update: libvpx-1.15.0-3.fc42

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applicati ons with the VP8 and VP9 video codecs, high quality, royalty free, open source co decs deployed on millions of computers and devices worldwide...

SourceCodester Open Source Clinic Management System 注入漏洞

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester Open Source. An injection vulnerability exists in SourceCodester Open Source Clinic Management System version 1.0, which results from SQL injection due to incorrect manipulation of t...

FreeScout Cross-Site Scripting Vulnerability (CNVD-2025-20778)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a cross-site scripting vulnerability that stems from not filtering the payload when creating translated phrases, no details of the vulnerability are...

Code-Projects Real Estate Property Management System 注入漏洞

Code-Projects Real Estate Property Management System is Code-Projects open source real estate property management system. An injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the...

PT-2025-24075 · Sourcecodester · Sourcecodester Open Source Clinic Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical issue has been discovered, affecting the /doctor.php file. The manipulation of the doctorname argument leads to SQL injection. This issue can be exploited...

Code-Projects Laundry System 安全漏洞

Laundry System is a laundry system. The Laundry System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit this vulnerability to spoof a malicious reque...

kafbat-ui 代码问题漏洞

kafbat-ui is an open source Web UI for managing Apache Kafka clusters from Kafbat Open Source. A code issue vulnerability exists in kafbat-ui version 1.0.0 that stems from insecure deserialization and could lead to the execution of arbitrary code...

Roundcube Webmail Deserialization Vulnerability

RoundCube Webmail is a browser-based open source multi-language IMAP client , using PHP + Ajax development , to provide a desktop application-like interface and complete mail management features . Roundcube Webmail has a deserialization vulnerability , the vulnerability stems from the...

Stealix: Model Stealing Via Prompt Evolution

Model stealing poses a significant security risk in machine learning by enabling attackers to replicate a black-box model without access to its training data, thus jeopardizing intellectual property and exposing sensitive information. Recent methods that use pre-trained diffusion models for data...

Falco 0.41.1

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

PT-2025-24007 · Sourcecodester · Sourcecodester Open Source Clinic Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Open Source Clinic Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Open Source Clinic Management System. The issue affects an unknown function of the file /login.php. The...

FIST: a Structured Threat Modeling Framework for Fraud Incidents

Fraudulent activities are rapidly evolving, employing increasingly diverse and sophisticated methods that pose serious threats to individuals, organizations, and society. This paper proposes the FIST Framework Fraud Incident Structured Threat Framework, an innovative structured threat modeling...

Code-Projects Traffic Offense Reporting System 安全漏洞

Traffic Offense Reporting System is a traffic violation reporting system. The Traffic Offense Reporting System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker cou...

SourceCodester Open Source Clinic Management System 代码问题漏洞

SourceCodester Open Source Clinic Management System is an open source clinic management system from SourceCodester Open Source. A code issue vulnerability exists in version 1.0 of the SourceCodester Open Source Clinic Management System, which stems from an unrestricted upload due to incorrect...

1000 Projects ABC Courier Management System Security Breach

1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. 1000 Projects ABC Courier Management System version 1.0 has a security vulnerability , the vulnerability stems from the wrong operation of the parameter Username in the file / adminSQL ,...

Mattermost Access Control Error Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Access Control Error vulnerability that stems from improper access control restrictions and can be exploited by an attacker to cause information disclosure...

Debian: Security Advisory (DSA-5936-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49001

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available...

CVE-2025-49002

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in...

CVE-2025-49000

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in label-sheet plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a...