CVE-2025-64030

Eximbills Enterprise 4.1.5 Built on 2020-10-30 is vulnerable to authenticated stored cross-site scripting CWE-79 via the /EximBillWeb/servlets/WSTrxManager endpoint. Unsanitized user input in the TMPLINFO parameter is stored server-side and rendered to other users, enabling arbitrary JavaScript...

EUVD-2025-199955

NutzBoot Incorrect Privilege Assignment vulnerability...

NutzBoot Incorrect Privilege Assignment vulnerability

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation...

CVE-2025-13806

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation...

CVE-2025-13806 nutzam NutzBoot Transaction API EthModule.java improper authorization

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation...

CVE-2025-13806 nutzam NutzBoot Transaction API EthModule.java improper authorization

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation...

PT-2025-48410

Name of the Vulnerable Software and Affected Versions nutzam NutzBoot versions up to 2.6.0-SNAPSHOT Description A security issue exists in nutzam NutzBoot related to improper authorization within the Transaction API. The issue stems from manipulation of the from, to, and wei arguments in an unkno...

CVE-2025-13806: Improper Authorization

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation...

Beyond the Hype: A Large-Scale Empirical Analysis of On-Chain Transactions in NFT Scams

Non-fungible tokens NFTs serve as a representative form of digital asset ownership and have attracted numerous investors, creators, and tech enthusiasts in recent years. However, related fraud activities, especially phishing scams, have caused significant property losses. There are many graph...

PT-2026-2510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Btrfs file system related to handling directory moves during transactions. Specifically, the system may incorrectly log inode information when...

MAL-2025-191127 Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199123

Malicious code in m25-transaction-utils npm...

PT-2025-47529

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A SQL injection issue exists in Campcodes Retro Basketball Shoes Online Store version 1.0. The issue is related to the manipulation of the tid parameter within an unknown...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42077)

ocfs2: DIO failure due to insufficient transaction credits. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504618; scriptversion"1.3";...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990919 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: adapt set backend to use GC transaction API Use the GC transaction API to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990892 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported ...

CVE-2025-11271

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271 Easy Digital Download <= 3.5.2 - Insufficient Verification to Order Manipulation

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...