Linux Distros Unpatched Vulnerability : CVE-2019-2183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local...

Linux Distros Unpatched Vulnerability : CVE-2024-26334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. CVE-2024-26334...

Linux Distros Unpatched Vulnerability : CVE-2022-40738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from...

CVE-2025-58135

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-8711

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to execute limited actions on behalf of th...

Google misled users about their privacy and now owes them $425m, says court

A court has ordered Google to pay $425m in a class action lawsuit after it was found to have misled users about their online privacy. In July 2020, Google user Anibal Rodriguez filed a lawsuit against the search giant, arguing that it misled users with its "Web & App Activity" setting. The settin...

CVE-2025-57633

CVE-2025-57633 affects FTP-Flask-python (through version 5173b68). The vulnerability stems from the /ftp.html endpoint’s Upload File action, which builds a shell command from the ftp_file parameter and executes it via os.system() without sanitization or escaping, enabling unauthenticated remote c...

PT-2025-36990

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Clients for Windows affected versions not specified Description: Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network...

CVE-2025-57633

A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands. The /ftp.html endpoint's "Upload File" action constructs a shell command from the ftpfile parameter and executes it using os.system without sanitization ...

CVE-2025-10108 Campcodes Online Loan Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

CVE-2024-48341

The CVE-2024-48341 entry concerns dingfanzu CMS V1.0, which has a Cross-Site Request Forgery (CSRF) flaw in the /admin/doAdminAction.php?act=addShop endpoint. The vulnerability is described with CVSSv3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N, base score 3.7 (LOW), indicating potential information ...

PT-2025-36498

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The application suffers from a Cross-Site Request Forgery CSRF issue. This occurs through the /admin/doAdminAction.php?act=addShop component. Recommendations: Apply appropriate CSRF protection mechanisms...

CVE-2024-48341

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...

dingfanzu 安全漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version V1.0, which originates from a cross-site request forgery vulnerability in the /admin/doAdminAction.php component...

CVE-2025-48042 Before action hooks may execute in certain scenarios despite a request being forbidden

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routine...