News Portal Hardcoding Vulnerability

News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.68.6, which stems from a lack of randomization of the secretKey and could lead to an adjacent attacker accessing application backup data...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989152 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can...

MAL-2025-49353 Malicious code in jsonretype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...

Malicious code in jsonretype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5153794835635057bad05300635360b4d6601aee683831850a767d139b4dbc The package jsonretype was found to contain malicious code. Source: ghsa-malware 95bc6e978289ad50ccb9d7e8a9656e9324b18e7d85d9765ac24a158b7d6e8a5e Any...

GHSA-GF93-XCCM-5G6J MARIN3R: Cross-Namespace Vulnerability in the Operator

Summary Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces. Affected Versions All versions prior to v0.13.4 Patched Versions v0.13.4 and later Impact Users with permission to create...

MARIN3R: Cross-Namespace Vulnerability in the Operator

Summary Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces. Affected Versions All versions prior to v0.13.4 Patched Versions v0.13.4 and later Impact Users with permission to create...

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

CVE-2025-11007

The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the wpajaxnoprivce21singlesignonsaveapisettings AJAX action in versions 2.2.1 to 2.3.1. This makes it possible for unauthenticated attackers to update the plugin's API...

MARIN3R: Cross-Namespace Vulnerability in the Operator

Cross-namespace Secret access vulnerability in DiscoveryServiceCertificate allows users to bypass RBAC and access Secrets in unauthorized namespaces...

EUVD-2025-37470

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

CVE-2025-12615

CVE-2025-12615 affects PHPGurukul News Portal 1.0. The vulnerability arises from manipulation of the SECRET_KEY in the file /onps/settings.py, leading to the use of a hard-coded cryptographic key. This enables remote exploitation and is described as difficult to exploit, with the exploit publicly...

CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

CVE-2025-12615 PHPGurukul News Portal settings.py hard-coded key

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack...

Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

PHPGurukul News Portal 安全漏洞

News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...

PT-2025-44748

Name of the Vulnerable Software and Affected Versions PHPGurukul News Portal version 1.0 Description A security issue exists in PHPGurukul News Portal. Manipulation of the SECRET KEY argument within an unknown function in the /onps/settings.py file results in the use of a hard-coded cryptographic...

MAL-2025-49327 Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...