CVE-2025-8974

A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some unknown functionality of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.java of the component JSON Web Token Handler. The manipulation of the argument SECRET with th...

CVE-2025-9052

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /updatepackage.php. The manipulation of the argument s1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

CVE-2025-9051 projectworlds Travel Management System updatecategory.php sql injection

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /updatecategory.php. The manipulation of the argument t1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

Malicious code in via-component-bundler (npm)

The package via-component-bundler was found to contain malicious code...

Malicious code in via-date-picker (npm)

The package via-date-picker was found to contain malicious code...

Malicious code in via-date-picker-test-5 (npm)

The package via-date-picker-test-5 was found to contain malicious code...

Malicious code in via-date-range (npm)

The package via-date-range was found to contain malicious code...

Malicious code in via-date-picker-test (npm)

The package via-date-picker-test was found to contain malicious code...

MAL-2025-38285 Malicious code in via-date-picker (npm)

The package via-date-picker was found to contain malicious code...

MAL-2025-38284 Malicious code in via-component-bundler (npm)

The package via-component-bundler was found to contain malicious code...

MAL-2025-38289 Malicious code in via-date-range (npm)

The package via-date-range was found to contain malicious code...

CVE-2025-50160

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

CVE-2025-8960

A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/saveairlines.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been...

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file

Summary Scala could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in LazyList. By sending specially-crafted request using gadget chain, an attacker could exploit this vulnerability to execute arbitrary code, erase contents of...

CVE-2025-8806

CVE-2025-8806 affects the zhilink ADP Application Developer Platform (version 1.0.0) from Zhilink. The vulnerability allows SQL injection through the parameter extId in the endpoint /adpweb/a/sys/office/treeData. The issue is exploitable remotely and, according to sources, the exploit has been di...

Linux Distros Unpatched Vulnerability : CVE-2023-4052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted wi...

ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330

...

Linux Distros Unpatched Vulnerability : CVE-2023-52988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' arr...

SUSE-SU-2025:02683-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. bsc1246477 - CVE-2024-43204: Fixed a SSRF when modproxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. bsc1246305 - CVE-2024-47252: Fixed insufficie...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...