CVE-2025-62699

The CVE-2025-62699 issue affects the Wikimedia Foundation MediaWiki Translate Extension (master before 1.39). The root cause is the Translate Extension’s use of jobs to edit translation pages, which causes the CheckUser tool to log the wrong IP and User-Agent, making these edits un-auditable. Thi...

IBM Transformation Extender Advanced Log Message Disclosure Vulnerability

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.8), @angular/build (>=20.2.0-next.3, <=21.0.0-next.8) +73 more potentially affected by CVE-2025-62522 via vite (>=7.1.0, <=7.1.10)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =1.0.0-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =0.11.0-alpha.5, =1.0.0-alpha.2 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +462 more potentially affected by CVE-2025-62522 via vite (>=5.0.0, <=5.4.20)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

CVE-2025-11944

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and...

CVE-2025-62528

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0...

PYSEC-2025-188

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0...

EUVD-2025-35097

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +204 more potentially affected by CVE-2025-62522 via vite (>=6.0.0, <=6.4.0)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.8), @angular/build (>=20.2.0-next.3, <=21.0.0-next.8) +73 more potentially affected by CVE-2025-62522 via vite (>=7.1.0, <=7.1.10)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =1.0.0-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =0.11.0-alpha.5, =1.0.0-alpha.2 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

Exploit-Android

Exploit-Android اختراق هواتف الاندرويد عبر انشاء ملف MP4 ملغم ا...

Zero-Days

It is an offensive tool for Windows. This repository appears to...

Exploit for Code Injection in Microsoft

It is an offensive tool for web exploitation. The repository con...

ROS-20251020-08

A vulnerability in the JavaScript JSS web application styling tool is related to a memory leak in a non-standard configuration. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the Claude Code tool, related to improper cleaning of input data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Claude Code tool arises due to incorrect cleaning of input data. Exploiting this vulnerability allows a remote attacker to compromise confidentiality and execute arbitrary commands...

CVE-2025-11944

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and...

CVE-2025-11944

Givanz Vvveb up to 1.0.7.3 is affected by a SQL injection in the Raw SQL Handler’s Import function (admin/controller/tools/import.php). The vulnerability arises from input handling in that function, potentially allowing remote exploitation once triggered. Publicly disclosed exploits exist, and a ...

CVE-2025-11944 givanz Vvveb Raw SQL import.php import sql injection

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and...

JLSEC-2025-150 A vulnerability was found in FFmpeg up to 7.1

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

JLSEC-2025-115 `libavcodec/dnxhddec.c` in FFmpeg 4.4 does not check the return value of the `init_vlc` function, a...

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...