42569 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
This is a Next.js project bootstrapped wit...
EUVD-2023-60155
In the Linux kernel, the following vulnerability has been resolved: devlink: report devlinkporttypewarn source device devlinkporttypewarn is scheduled for port devlink and warning when the port type is not set. But from this warning it is not easy found out which device driver has no devlink port...
EUVD-2025-202180
Elysia vulnerable to prototype pollution with multiple standalone schema validation...
EUVD-2025-201933
Malicious code in libxmljs2woter npm...
CVE-2025-14209
CVE-2025-14209 affects Campcodes School File Management System 1.0. A vulnerability in the file /update_query.php allows SQL injection through the parameter (stud_id/student_id depending on source). The issue enables remote exploitation and has publicly available exploits. Impact is described as ...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the hwq-cqlock deadlock issue, which could cause the system to hang...
GHSA-2JCR-4R89-72R6 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-VWXF-55XH-P3XF vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
Enjin: Unauthenticated GraphQL access by prepending __schema to private operations
A security vulnerability was identified in the GraphQL schema of the Enjin Platform. The vulnerability allowed unauthorized access to the GraphQL schema by prepending "schema" to private operations. The vulnerability was discovered and reported by a security researcher. The specific location of t...
EUVD-2025-200715
Malicious code in @hand-talk/yotta-icons npm...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)
Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...
EUVD-2025-198678
Malicious code in @posthog/rrdom npm...
EUVD-2025-198545
Malicious code in airbnb-phoenix npm...
Structured Extraction of Vulnerabilities in OpenVAS and Tenable WAS Reports Using LLMs
This paper proposes an automated LLM-based method to extract and structure vulnerabilities from OpenVAS and Tenable WAS scanner reports, converting unstructured data into a standardized format for risk management. In an evaluation using a report with 34 vulnerabilities, GPT-4.1 and DeepSeek...
CVE-2024-44652
Kashipara Ecommerce Website 1.0 is reported to be vulnerable to SQL Injection via the user_register.php parameters: user_email, username, user_firstname, user_lastname, and user_address. The Red Hat, ENISA EUVD, NVD, CVE records consistently describe an SQL injection issue in the same input field...
EUVD-2025-175349
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-179185
Malicious code in elara-triton-quasar-async npm...