EUVD-2023-0949

Malicious code in bioql PyPI...

EUVD-2023-54670

Malicious code in bioql PyPI...

EUVD-2023-2089

Malicious code in bioql PyPI...

EUVD-2021-31863

Malicious code in bioql PyPI...

MinIO Java SDK 代码注入漏洞

MinIO Java SDK is an open source developer tool for MinIO Client for Java by MinIO. A code injection vulnerability exists in versions of MinIO Java SDK prior to 8.6.0, which stems from the automatic substitution of XML tagged values for system properties or environment variables, which could lead...

MCP MariaDB Server 安全漏洞

MCP MariaDB Server is an open source server implementation of the Large Language Model Context Protocol for MariaDB. A security vulnerability exists in MCP MariaDB Server version 0.1.0, which stems from a lack of user authentication for the SSE service and could lead to the disclosure of sensitiv...

Linux Distros Unpatched Vulnerability : CVE-2017-14240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter. CVE-2017-14240 Note that...

QEMU 安全漏洞

QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. QEMU suffers from a security vulnerability that stems from the fact that an attacker can bypass access restrictions via uefi-vars, which...

CVE-2025-6984 Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which...

CVE-2025-6984 Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which...

IBM Sterling B2B Integrator和IBM Sterling File Gateway 安全漏洞

IBM Sterling B2B Integrator and IBM Sterling File Gateway are both products of International Business Machines IBM.IBM Sterling B2B Integrator is a suite of software that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B...

SMA Solar Technology AG Sunny Boy 安全漏洞

SMA Solar Technology AG Sunny Boy is a photovoltaic inverter from SMA Solar Technology AG, Germany. A security vulnerability exists in the SMA Solar Technology AG Sunny Boy that stems from improper access control and could lead to the disclosure of sensitive system information...

WordPress plugin TaxoPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

YugabyteDB 安全漏洞

YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB that stems from a diagnostic information transfer over HTTP that could lead to the disclosure of sensitive data...

Cursor 代码问题漏洞

Cursor is an AI code editor open-sourced by Cursor. A code issue vulnerability exists in Cursor versions prior to 1.3 that stems from Mermaid allowing embedded images, which could lead to the disclosure of sensitive information...

Code-Projects Restaurant Order System 安全漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. A security vulnerability exists in Code-Projects Restaurant Order System version 1.0, which originates from a SQL injection vulnerability in the payment.php file, which may lead to the disclosure o...

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. Integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile versions 1.1.0 through 1.1.22, which originates from the...

Perplexity AI Web Application 安全漏洞

Perplexity AI Web Application is a big data search engine application utilizing a big language model from Perplexity, Inc. in the United States. A security vulnerability exists in Perplexity AI Web Application GPT-4 version 2.51.0, which stems from mishandling of the token component and could lea...

PT-2025-28738 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.2 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory. Successful exploitation requires a user to open a specially...

The vulnerability of the Segnetics SMConfig system configuration tool lies in the insufficient security of the database where user credentials are stored, allowing attackers to access and disclose sensitive information.

The vulnerability of the Segnetics SMConfig system configuration tool is related to the insufficient security of the database where user credentials are stored. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted GET request from...