17029 matches found
Malicious code in byted-pgc-admin-form (npm)
The package byted-pgc-admin-form was found to contain malicious code...
MAL-2025-40958 Malicious code in zest-yurt-v21j (npm)
The package zest-yurt-v21j was found to contain malicious code...
Malicious code in react-scripts-cep (npm)
The package react-scripts-cep was found to contain malicious code...
Malicious code in heather_9km8u_9mvz3_jigsaw (npm)
The package heather9km8u9mvz3jigsaw was found to contain malicious code...
MAL-2025-37224 Malicious code in trophyjs (npm)
The package trophyjs was found to contain malicious code...
MINI-WJQJ-5W2J-R7W8
Bulletin has no description...
PT-2025-33152 · Unknown · Beeteam368 Extensions
Name of the Vulnerable Software and Affected Versions: BeeTeam368 Extensions versions through 1.9.4 Description: BeeTeam368 Extensions is susceptible to a PHP Local File Inclusion due to an Improper Control of Filename for Include/Require Statement. This allows for the inclusion of local files...
PT-2025-33389 · Unknown · Shahjada Wpdm – Premium Packages
Name of the Vulnerable Software and Affected Versions: Shahjada WPDM – Premium Packages versions through 6.0.2 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: Update Shahja...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the improper conversion of numerical types, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the improper conversion of numerical types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2025-23303
NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...
CVE-2025-8908 Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection
A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...
CGA-9XPV-MGHP-WMCX
Bulletin has no description...
OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...
Intel RealSense Dynamic Calibrator 代码问题漏洞
Intel RealSense Dynamic Calibrator is a software for optimizing and fine-tuning the depth and image quality of a camera from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense Dynamic Calibrator versions prior to 2.14.2.0, which stems from an uncontrolled search path that...
Adobe Substance3D Modeler 代码问题漏洞
Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. Adobe Substance3D Modeler suffe...
IBM Engineering Lifecycle Optimization Publishing Cross-Site Scripting Vulnerability
IBM Engineering Lifecycle Optimization Publishing is an automated document generation solution from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Engineering Lifecycle Optimization Publishing versions 7.0.2 and 7.03 that originates from an unvalidated URI...
MINI-W88F-JQC6-5R4P
Bulletin has no description...
MINI-PV5Q-73X4-93MJ
Bulletin has no description...