3362 matches found
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in versions prior to Coolify v4.0.0-beta.420.6, which stems from a remote code execution in the application deployment workflow that could result in gaining root...
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in versions prior to Coolify v4.0.0-beta.420.6, which stems from the presence of stored cross-site scripting in the project creation workflow that could lead to...
PT-2025-34900
Name of the Vulnerable Software and Affected Versions: Coolify versions prior to v4.0.0-beta.420.6 Description: Coolify is susceptible to a remote code execution issue within the application deployment workflow. Authenticated users with low-level member privileges can inject arbitrary Docker...
SUSE CVE-2025-9384
A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpeditpostargs of the file /src/tcpedit/parseargs.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading t...
CVE-2025-9385
A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fixipv6checksums of the file editpacket.c of the component tcprewrite. This manipulation causes use after free. The attack is restricted to local execution. The exploit has been published and may be used...
BIT-DISCOURSE-2025-54411 Discourse welcome banner user name XSS
Discourse is an open-source discussion platform. Welcome banner user name string for logged in users can be vulnerable to XSS attacks, which affect the user themselves or an admin impersonating them. Admins can temporarily alter the welcomebanner.header.loggedinmembers site text to remove the...
CVE-2025-54411
CVE-2025-54411 affects Discourse prior to 3.5.0.beta8, where the welcome_banner.header.logged_in_members and the logged-in user name string can cause cross-site scripting (XSS). The underlying issue is in the welcome banner user name string, enabling XSS that may impact the user or allow an admin...
Linux Distros Unpatched Vulnerability : CVE-2021-39202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets edito...
Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
MAL-2025-29553 Malicious code in powerbi-client-beta (npm)
The package powerbi-client-beta was found to contain malicious code...
MAL-2025-19083 Malicious code in earth-beta-scale-meta-cold (npm)
The package earth-beta-scale-meta-cold was found to contain malicious code...
MAL-2025-19677 Malicious code in enum-beta-java-double-encrypt (npm)
The package enum-beta-java-double-encrypt was found to contain malicious code...
MAL-2025-15612 Malicious code in beta-epsilon-unix-emulate-spy (npm)
The package beta-epsilon-unix-emulate-spy was found to contain malicious code...
Malicious code in deploy-public-beta-optimize-permission (npm)
The package deploy-public-beta-optimize-permission was found to contain malicious code...
Malicious code in container-dog-omicron-beta-route (npm)
The package container-dog-omicron-beta-route was found to contain malicious code...
Malicious code in beta-decompress-daemon-minify-simple (npm)
The package beta-decompress-daemon-minify-simple was found to contain malicious code...
MAL-2025-15611 Malicious code in beta-decompress-daemon-minify-simple (npm)
The package beta-decompress-daemon-minify-simple was found to contain malicious code...
Malicious code in beta-epsilon-unix-emulate-spy (npm)
The package beta-epsilon-unix-emulate-spy was found to contain malicious code...