1519 matches found
Mattermost has an Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to properly validate guest user permissions when adding channel members which allows guest users to add any team members to their private channels via the /api/v4/channels/channelid/members endpoint...
QuickJS 安全漏洞
QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS due to a type confusion when handling string addition operations, which could lead to out-of-bounds memory accesses and memory corruption to execute arbitrary code...
CVE-2025-39967 fbcon: fix integer overflow in fbcon_do_set_font
In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcondosetfont Fix integer overflow vulnerabilities in fbcondosetfont where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1...
PT-2025-42225
CVE-2025-56219 CVE-2025-56219 Lack of Rate Limiting – Add Package API Description An attacker can automate the creation of a large number of Packages in a short period of time to cause a DoS. CVSS Score https://t.co/iF3xHC0jbb...
CVE-2025-11667
The CVE-2025-11667 entry concerns code-projects Automated Voting System 1.0. Affected component: the server-side code in /admin/add_candidate_modal.php. The vulnerability is SQL injection triggered by manipulating the firstname parameter, allowing remote exploitation. Multiple connected sources c...
SUSE-SU-2025:03522-1 Security update for openssl-1_1-livepatches
This update for openssl-11-livepatches fixes the following issues: - Add livepatch for CVE-2025-9230 bsc1250410...
CVE-2025-60302
code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting XSS. When adding customer information, the client details system fills in malicious JavaScript code in the username field...
CVE-2025-60302
code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting XSS. When adding customer information, the client details system fills in malicious JavaScript code in the username field...
PT-2025-41391
Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0 Description The code-projects Client Details System version 1.0 is susceptible to a Cross Site Scripting XSS issue. When adding customer information, the system allows malicious JavaScript code t...
CVE-2025-11410
Affects Campcodes Advanced Online Voting Management System 1.0. The vulnerability lies in the /admin/voters_add.php endpoint where manipulating the firstname argument can cause a SQL injection. It is remotely exploitable and an exploit has been published; other parameters may be affected. Remedia...
EUVD-2012-5921
Malware in sbrugna...
EUVD-2010-5256
Malware in sbrugna...
EUVD-2007-6607
Malware in sbrugna...
EUVD-2000-0030
Malware in sbrugna...
EUVD-2020-11175
Malware in sbrugna...
EUVD-2020-16575
Malware in sbrugna...
EUVD-2019-7239
Malware in sbrugna...
EUVD-2020-11171
Malware in sbrugna...