1536 matches found
CVE-2025-60266
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...
CVE-2025-60266
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...
Fedora 42 : pgadmin4 (2025-3c80b660e0)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3c80b660e0 advisory. Update to pgadmin-9.8. Fixes CVE-2025-9636. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
PT-2025-41448
Name of the Vulnerable Software and Affected Versions xckk version 9.6 Description The software contains a SQL injection issue due to insufficient filtering of the cond parameter within the ''/notice/list'' API endpoint. This allows for potential unauthorized database access or modification...
EUVD-2025-32906
Malicious code in v0-core npm...
WukongCRM 安全漏洞
WukongCRM is a Customer Relationship Management CRM system from Wukong, China. A security vulnerability exists in WukongCRM version 9.0-JAVA, which stems from a fastjson deserialization issue in the /OaExamine/setOaExamine interface that could lead to arbitrary code execution...
EUVD-2018-21139
Malware in sbrugna...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
CVE-2023-53553
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from...
EUVD-2025-26496
Malicious code in bioql PyPI...
EUVD-2025-29629
Malicious code in bioql PyPI...
EUVD-2025-27741
Malicious code in bioql PyPI...
EUVD-2025-27706
Malicious code in bioql PyPI...
EUVD-2025-30903
Malicious code in bioql PyPI...
GTONE ChangeFlow 安全漏洞
GTONE ChangeFlow is an application change management software from GTONE Korea. A security vulnerability exists in GTONE ChangeFlow v9.0.1.1 and prior versions, which stems from improper pathname restriction and missing integrity checking of code downloads, which could lead to path traversal...
CVE-2025-61045
TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...
CVE-2025-36099
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources...
