4330 matches found
CVE-2025-65411
A flaw was found in GNU Unrtf. This vulnerability, a NULL pointer dereference in the src/path.c component, allows an attacker to cause a Denial of Service DoS by injecting a specially crafted payload into the searchpath parameter. This can lead to the application becoming unresponsive or crashing...
CVE-2025-15372: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in youlaitech vue3-element-admin up to 3.4.0. This issue affects some unknown processing of the file src/views/system/notice/index.vue of the component Notice Handler. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2025-15398: Weak Password Recovery Mechanism for Forgotten Password
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack can be executed remotely. This attack...
Server-side Request Forgery (SSRF)
Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the TimThumb component in the timthumb.php file. An attacker can access internal resources or perform unauthorized requests by manipulating the src argument...
CVE-2025-15264
CVE-2025-15264 affects FeehiCMS (up to v2.1.1) via the TimThumb component in frontend/web/timthumb.php. The vulnerability arises from manipulating the src argument, enabling server-side request forgery (SSRF) and potentially allowing remote exploitation. Public disclosures of the exploit exist; t...
CVE-2025-15264 FeehiCMS TimThumb timthumb.php server-side request forgery
A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been...
UBUNTU-CVE-2025-65411
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the searchpath parameter...
CVE-2025-65411: NULL Pointer Dereference
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the searchpath parameter...
CVE-2024-30855: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...
CVE-2025-15150: Stack-based Buffer Overflow
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::statelisting/MavlinkLogHandler::logentryfromid of the file src/modules/mavlink/mavlinkloghandler.cpp. The manipulation results in stack-based buffer overflow. The attack is only...
CVE-2025-65410
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted input into the filename parameter...
UBUNTU-CVE-2025-65410
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted input into the filename parameter...
EUVD-2025-204940
Malicious code in baidu-src-test4 npm...
MAL-2025-192713 Malicious code in baidu-src-test4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...
CVE-2024-25812
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...
CVE-2025-65410
A stack overflow vulnerability exists in the src/main.c component of GNU Unrtf v0.21.10 . Attackers can exploit this by injecting crafted input into the filename parameter , resulting in a Denial of Service (DoS) . No specific remediation details or exploit links are provided in the documents.
CVE-2025-65410: Stack-based Buffer Overflow
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted input into the filename parameter...
EUVD-2024-23120
MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...