The vulnerability of Nagios XI, a monitoring tool for IT infrastructure, arises due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute XSS attacks.

The vulnerability of the Nagios XI monitoring tool exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

DEBIAN-CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...

CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...

The vulnerability in the web application for managing phpMyAdmin’s database management systems arises from the lack of protective measures taken against the structure of the web page. This allows attackers to execute arbitrary code.

The vulnerability in the web application for managing phpMyAdmin is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software interface for the training and control system “OLIMPOKS” allows a perpetrator to perform cross-site scripting attacks (XSS).

The vulnerability of the software interface for the training and control system “OLIMPOKS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

The vulnerability of the vTiger CRM customer relationship management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the vTiger CRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web application for managing phpMyAdmin, related to the lack of protective measures for the web page structure, allows a perpetrator to execute arbitrary code.

The vulnerability in the web application for managing phpMyAdmin is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCIEVNUMCOMPPKTS event, the function hciconntxdequeue did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to escalate their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...

The vulnerability of the Choice Authentication Module component of the authentication system for web applications in LemonLDAP::NG allows attackers to perform cross-site scripting attacks.

The vulnerability of the Choice Authentication Module component in the authentication system of the LemonLDAP::NG web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

EUVD-2025-124912

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmetfclsreqop It’s possible for more than one async command to be in flight from nvmetfcsendlsreq. For each command, a tgtport reference is taken. In the current code, only one put work item is...

The vulnerability of the NetworksController.addNetworkAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a attacker to execute XSS attacks.

The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with the Advantech WebAccess/VPN virtual private network exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor ...

The vulnerability of the Dynamics 365 Field Service resource planning software lies in the lack of protective measures for the website structure, allowing attackers to perform spear-phishing attacks.

The vulnerability of the Dynamics 365 Field Service resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable() function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may all...

kernel: ipv6: use RCU protection in ip6_default_advmss()

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6defaultadvmss ip6defaultadvmss needs rcu protection to make sure the net structure it reads does not disappear...

kernel: ipv6: use RCU protection in ip6_default_advmss()

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6defaultadvmss ip6defaultadvmss needs rcu protection to make sure the net structure it reads does not disappear...

Malicious code in lina-wajit42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b302d518dbb1025b77109a99d8c943b4fefbfdfc2a29adb6663dc81927b555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

The vulnerability of the SuiteCRM customer relationship management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the SuiteCRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Parse Server 安全漏洞

Parse Server is an open source backend for Parse Platform Open Source that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 8.5.0-alpha.5, which stems from allowing any client to execute an explain query without a master...

The vulnerability of the Jmix framework for corporate web applications lies in its lack of protection for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Jmix framework for corporate web applications is related to the lack of protective measures for the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...