EUVD-2025-41952

Malicious code in sari-pisang47-riris npm...

EUVD-2025-43280

Malicious code in nina-empal96-breki npm...

EUVD-2025-43869

Malicious code in hendra-ikan65-breki npm...

EUVD-2025-39847

Malicious code in eka-gaplek76-sluey npm...

EUVD-2025-39161

Malicious code in wawan-sambel72-sluey npm...

EUVD-2025-40059

Malicious code in citra-lengko4-miaww npm...

EUVD-2025-40466

Malicious code in bayu-telurtahu17-breki npm...

EUVD-2025-39325

Malicious code in umi-gandul97-breki npm...

EUVD-2025-39193

Malicious code in vina-tapai60-miaww npm...

EUVD-2025-40256

Malicious code in candra-miemee90-riris npm...

EUVD-2025-40676

Malicious code in andi-ketoprak25-sukiwir npm...

EUVD-2025-40673

Malicious code in andi-kue85-miaww npm...

Apple macOS Sequoia Permission Issue Vulnerability (CNVD-2025-29330)

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia has a privilege issue vulnerability that can be exploited by attackers to cause an application to access sensitive user data...

GHSA-PWHC-RPQ9-4C8W vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kubescape, teleport, cert-manager-cmctl, headlamp, helm-push, k8ssandra-client, neuvector-scanner, opa, spegel, docker-compose, tw, kubescape-operator, melange, consul-k8s, grype, k8sgpt, rancher-fleet, zarf, containerd, opa-envoy, wolfictl, docker...

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

EUVD-2025-38161

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

EUVD-2025-38172

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

CVE-Report

...

CVE-Report

...

EUVD-2025-37791

The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...