10967 matches found
PT-2025-41188
Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5 Description A specially crafted shared deck on Windows can lead to the execution of arbitrary commands when playing audio due to improper handling of URL schemes. Recommendations Update to version 25.02.5 or late...
Grafana 11.4.x < 11.4.3 Improper Authorization
According to its self-reported version, the Grafana install hosted on the remote host is prior to 10.4.17, or 11.2.x prior to 11.2.8, or 11.3.x prior to 11.3.5, or 11.4.x prior to 11.4.3, or 11.5.x prior to 11.5.3. It is, therefore, affected by an improper authorization. - Grafana's datasource...
CVE-2025-61768 Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF Server-Side Request Forgery vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external imag...
PT-2025-40885
Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 1.18 Description A flaw exists in Logo Cloud that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...
Logo Cloud 安全漏洞
Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 2.57 that stems from improper output encoding or escaping, which could lead to a phishing attack...
CVE-2025-50538
Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...
BIT-MONGODB-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs
An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v6.0...
Pilot Contamination Attacks Detection with Machine Learning for Multi-User Massive MIMO
Massive multiple-input multiple-output MMIMO is essential to modern wireless communication systems, like 5G and 6G, but it is vulnerable to active eavesdropping attacks. One type of such attack is the pilot contamination attack PCA, where a malicious user copies pilot signals from an authentic us...
EUVD-2024-52017
Malicious code in bioql PyPI...
EUVD-2024-20256
Malicious code in bioql PyPI...
EUVD-2022-1112
Malicious code in bioql PyPI...
EUVD-2025-25498
Malicious code in bioql PyPI...
EUVD-2024-45366
Malicious code in bioql PyPI...
EUVD-2021-8243
Malicious code in bioql PyPI...
EUVD-2022-0543
Malicious code in bioql PyPI...
EUVD-2023-33951
Malicious code in bioql PyPI...
EUVD-2023-2758
Malicious code in bioql PyPI...
EUVD-2024-36064
Malicious code in bioql PyPI...