CVE-2025-67727

Parse Server versions prior to 8.6.0-alpha.2 are affected by a GitHub CI workflow privilege elevation that grants the Actions workflow access to repository secrets and write permissions defined in the workflow, potentially including code from forks or lifecycle scripts. The issue is confined to t...

Parse Server 安全漏洞

Parse Server is an open source backend from Parse Platform Open Source that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 8.6.0-alpha.2, which stems from a GitHub CI workflow elevation of privilege that could lead to...

CVE-2025-66016

CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing requires 3 preprocessing rounds, identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full...

CVE-2025-66016

CGGMP24 (ECDSA TSS) CVE-2025-66016 concerns a missing check in the ZK proof in CGGMP21 that could allow a single malicious signer to reconstruct the full private key. The issue is described across multiple sources: prior to version 0.6.3, the missing check enabled the attack; a patch exists in v0...

EUVD-2008-6962

Malware in sbrugna...

EUVD-2024-1036

Malicious code in bioql PyPI...

CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...

CVE-2022-26607

A remote code execution RCE vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2022-26607

A remote code execution RCE vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2022-26607

CVE-2022-26607 affects baigo CMS v3.0-alpha-2. An RCE exists where an attacker can upload a crafted PHP file to execute arbitrary code on the vulnerable system. The issue is evidenced across multiple sources (NVD, Red Hat, CNVD, CVE lists) and is described as a remote code execution via file uplo...

Fedora 30 : python39 (2019-03cf68b75d)

This is an early developer preview of Python 3.9, alpha 2. It contains security fixes as well as bugfixes and new features. ---- Build Python with -fno-semantic-interposition for better performance. https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSp eedup Note that Tenable...

The Rat CMS viewarticle2.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

The Rat CMS viewarticle.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

The Rat CMS viewarticle2.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Now SMS/MMS Gateway 5.5 - Remote Buffer Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Now SMS/MMS Gateway v5.5 and others ---------------------------------------- Exploit : Now SMS/MMS Gateway v5.5 Remote Buffer Overflow Exploit Exploit date : 14.04.2008 Exploit writer : Hereti...

Alpha 2 Player Denial Of Service

=================================================== ALPHA 2 Player Denial of service vulnerability =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/addalbum.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/...

CVE-2009-3173

The Rat CMS Alpha 2 is affected by CVE-2009-3173 due to an unrestricted file upload in admin/add_album.php. An attacker can upload a file with an executable extension to the server, then access it via a direct request to the file under images/, potentially allowing remote code execution. The affe...

The Rat CMS Alpha 2 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= The Rat CMS Alpha 2 Arbitrary File Upload Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

The Rat CMS Alpha 2 Arbitrary File Upload Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: The Rat Cms Version: Alpha 2 DL: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir &...