NPM: node-tar: Decompression/parse DoS via unlimited input

NPM: node-tar: Decompression/parse DoS via unlimited input vulnerability discovered by ? in WordPress Npm tar versions = 7.5.18...

Linux Distros Unpatched Vulnerability : CVE-2026-44291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - protobufjs compiles protobuf definitions into JavaScript JS functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for...

GROWI 路径遍历漏洞

GROWI is an enterprise-level open-source knowledge base/Wiki system built using Node.js and React by GROWI Inc. GROWI versions 7.5.0 and earlier have a path traversal vulnerability. This vulnerability allows attackers to execute arbitrary EJS templates on the server...

EUVD-2025-31586

Malicious code in bioql PyPI...

WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Super Store Finder versions = 7.5...

aEnrich a+HRD 代码问题漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A code issue vulnerability exists in aEnrich a+HRD 7.5 and prior versions, which stems from the presence of an insecure deserialization vulnerability that allows attackers to execute arbitrary code...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A user enumeration vulnerability exists in IBM Db2 for i versions 7.2, 7.3, 7.4, and 7.5, which stems...

PT-2024-24008 · Lifterlms · Lifterlms

Name of the Vulnerable Software and Affected Versions: LifterLMS versions n/a through 7.5.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the use...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is a free image viewing, converting and editing tool. A stack buffer overflow vulnerability exists in the CUR file parsing feature in FastStone Image Viewer 7.5 and earlier versions. The vulnerability can be exploited to execute arbitrary code via specially crafted CUR file...

HP Matrix Operating Environment Systems Insight Manager Information Disclosure Vulnerability (CNVD-2015-05704)

HP Matrix Operating Environment is a set of cloud management software designed for infrastructure services from Hewlett-Packard HP in the U.S. HP Systems Insight Manager SIM is a set of management software for HP servers and storage devices. The software provides multi-system management, fault...