14391 matches found
Exploit for Use After Free in Apple Safari
CVE-2025-43529 Root Cause Analysis for CVE-2025-43529, a UAF...
PT-2026-43753
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the prototype for the bpf xdp store bytes function is incorrect. The verifier incorrectly expects the third argument to be of type ARG PTR TO...
Malicious Package
Overview electron-wix-msi-local is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
Hono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception
Summary Cache Middleware contains an information disclosure vulnerability caused by improper handling of HTTP cache control directives. The middleware does not respect standard cache control headers such as Cache-Control: private or Cache-Control: no-store, which may result in private or...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-69559: Unrestricted Upload of File with Dangerous Type
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
EUVD-2025-206389
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to an unrestricted file upload in the admin_add.php component. This vulnerability allows for the upload of files with dangerous types. While the documents confirm the existence of the vulnerability and its location, specific exploitation details...
CVE-2025-69559
code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...
Code-Projects Computer Book Store Security Vulnerabilities
Code-Projects Computer Book Store is an open-source computer bookstore developed by Code-Projects. Version 1.0 of Code-Projects Computer Book Store contains a security vulnerability, which stems from a file upload vulnerability in the adminadd.php file...
PT-2026-4965
code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin add.php...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005094)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005094 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of...
CVE-2026-24477 AnythingLLM has key leak in `systemSettings.js`
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticate...
Directory Traversal
Overview @pnpm/store.cafs is a content-addressable filesystem for the packages storage Affected versions of this package are vulnerable to Directory Traversal via improper path normalization during tarball extraction on Windows. An attacker can overwrite files outside the intended directory by...
Symlink Attack
Overview @pnpm/store.cafs is a content-addressable filesystem for the packages storage Affected versions of this package are vulnerable to Symlink Attack via the handling file: or git: dependencies, which follow symlinks without restricting access to the package root. An attacker can access and...
