82899 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-52331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the...
PT-2025-46990
Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the /admin/view-member-report.php file...
CodeAstro Gym Management System SQL注入漏洞
Gym Management System is a gym management system from SourceCodester. A SQL injection vulnerability exists in version 1.0 of the Gym Management System, which stems from incorrect manipulation of the parameter ID in the file /admin/view-member-report.php, which could lead to a SQL injection attack...
EUVD-2025-175349
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution
The NLTK downloader component contains a critical vulnerability where the unzipiter function uses zipfile.extractall without path validation or security checks. This allows malicious zip packages to achieve arbitrary code execution when extracted and loaded by NLTK. The vulnerability exists becau...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 3, 2025 to November 9, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! The LFInder Challenge:Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of...
CVE-2025-40164
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...
CVE-2025-63892
creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...
EUVD-2025-175866
Malicious code in try-data-signal-cloud-report npm...
EUVD-2025-180510
Malicious code in accretion-kastra-nightmare-module npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-177827
Malicious code in minify-report-compress-compress-process npm...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
EUVD-2025-178982
Malicious code in exobiology-chalk-xml-atlas npm...
EUVD-2025-179185
Malicious code in elara-triton-quasar-async npm...
EUVD-2025-176725
Malicious code in reject-report-water-thread-parse npm...
EUVD-2025-177425
Malicious code in optimize-report-pi-module-hash npm...
Malicious code in abstract-hash-key-report-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...