13088 matches found
CVE-2025-53824 WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the editarpermissoes.php endpoint of the WeGIA application prior to version 3.4.4. This vulnerability allows attackers to...
Denial Of Service (DoS)
org.apache.tomcat:tomcat-coyote is vulnerable to Denial Of Service DoS. The vulnerability is due to failure to handle cases where an HTTP/2 client does not acknowledge the initial settings frame, allowing excessive concurrent streams and leading to resource exhaustion...
K000152565: Golang-JWT vulnerability CVE-2025-30204
Security Advisory Description golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a...
MAL-2025-6210 Malicious code in mgz-testpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82f0658f0d08613ec76f5066bad323001a5a95afc35b8befc4a34c82a68e0a7 The OpenSSF Package Analysis project identified 'mgz-testpkg' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
MINI-Q3RC-MW86-XQG6
Bulletin has no description...
Heap Buffer Overflow
ExecuTorch is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper handling of buffer boundaries during the loading of ExecuTorch methods, which allows an attacker to cause a runtime crash and potentially execute arbitrary code...
PT-2025-29468 · Unknown · Simple Php Shopping Cart
Name of the Vulnerable Software and Affected Versions: Simple Shopping Cart version 1.0 Description: A vulnerability exists in Simple Shopping Cart that allows for remote SQL injection. The vulnerability is located in the /register.php file, specifically through manipulation of the ruser email...
MINI-FJPH-7VR4-RGX6
Bulletin has no description...
MINI-5GHQ-3FVH-M4P8
Bulletin has no description...
MINI-2JX6-JGHF-FHM4
Bulletin has no description...
MAL-2025-6075 Malicious code in cbd2.1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8993bc07e0fceff0fe2da225bca50422f04aa7a8a35e864b478205a6e99786e4 Any computer that has this package installed or running should be considered...
MINI-FJH2-M992-M6FX
Bulletin has no description...
MINI-PGCJ-W463-XQJ2
Bulletin has no description...
MINI-C4P5-Q63X-JQ26
Bulletin has no description...
MINI-8535-HCWC-RXCG
Bulletin has no description...
MINI-V2RQ-PXGR-463F
Bulletin has no description...
MINI-W334-RJM7-G6QF
Bulletin has no description...
MAL-2025-6105 Malicious code in model-providers (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bc812776fc9ca2678deabf678d9dae58067e353d0d7131e35d68fa452ff57f5 The OpenSSF Package Analysis project identified 'model-providers' @...
MAL-2025-5838 Malicious code in @0xzyo111/frontend-logger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea6fe9c933bc0a4ac656882af6f4662783f92087518dbbb253c351f60d44b63 Any computer that has this package installed or running should be considered...