14979 matches found
PT-2025-34104
Name of the Vulnerable Software and Affected Versions MJM QuickPlayer version 2010 Description MJM QuickPlayer also known as MJM Player contains a stack-based buffer overflow triggered by opening a malicious .s3m music file. This issue arises from improper bounds checking in the file parser, whic...
CERTFR-2025-ACT-034
creationtimestamp| type| source ---|---|--- 2025-08-18 12:36:59+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lwofzif6sf2d 2025-08-18 12:37:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115049799264599748 2025-08-19 08:01:41+00:00| seen|...
CVE-2025-7684
The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfmalbumsartwork.php' page. This makes it possible for unauthenticated attackers to update...
Linux Distros Unpatched Vulnerability : CVE-2023-22792
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression based DoS vulnerability in Action Dispatch 6.0.6.1, 6.1.7.1, and 7.0.4.1. Specially crafted cookies, in combination with a specially crafte...
Linux Distros Unpatched Vulnerability : CVE-2021-22885
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with...
Linux Distros Unpatched Vulnerability : CVE-2021-22881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in...
CVE-2025-7683 LatestCheckins <= 1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1. This is due to missing or incorrect nonce validation on the 'LatestCheckins' page. This makes it possible for unauthenticated attackers to update settings and inject...
CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
CVE-2025-8491
The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the nsceprmsavemenu function. This makes it possible for unauthenticated attackers to upload a men...
OSV-2025-633 UNKNOWN WRITE in _lou_handlePassVariableAction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438413376 Crash type: UNKNOWN WRITE Crash state: louhandlePassVariableAction passDoAction translateString...
CVE-2025-54222
Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-54203
Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
MAL-2025-29577 Malicious code in pr-lint-action (npm)
The package pr-lint-action was found to contain malicious code...
Malicious code in pr-lint-action (npm)
The package pr-lint-action was found to contain malicious code...
MAL-2025-17977 Malicious code in dasnoo-action (npm)
The package dasnoo-action was found to contain malicious code...
MAL-2025-18702 Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm)
The package down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo was found to contain malicious code...
Malicious code in dasnoo-action (npm)
The package dasnoo-action was found to contain malicious code...
Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm)
The package down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo was found to contain malicious code...