11982 matches found
CVE-2025-59112
Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Malicious attacker can craft special website, which when visited by the victim, will automatically send POST request that deletes given user. Only version 4.1 was tested and confirmed as vulnerable. This issue wa...
CVE-2025-59113
Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting this parameter. Only version 4.1 was tested and...
Itel DAB MUX 安全漏洞
Itel DAB MUX is an encoding and multiplexing all-in-one device from Itel, Italy. A security vulnerability exists in the Itel DAB MUX build c041640a version, which stems from improper JWT authentication and could lead to authentication bypass and full device control...
Itel DAB Gateway IDGat 安全漏洞
Itel DAB Gateway IDGat is an audio transmission gateway from Itel Italy. A security vulnerability exists in the Itel DAB Gateway IDGat build c041640a version, which stems from improper JWT authentication and could lead to authentication bypass and full device control...
gcc crate is unmaintained
The gcc crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - cc...
[SECURITY] Fedora 41 Update: python-uv-build-0.9.7-2.fc41
This package is a slimmed down version of uv containing only the build backend...
[SECURITY] Fedora 42 Update: python-uv-build-0.9.7-2.fc42
This package is a slimmed down version of uv containing only the build backend...
Fedora 41 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-00e5b3d89c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-00e5b3d89c advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
Fedora 42 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-e60a4ba4d7)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e60a4ba4d7 advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21373 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +266 more potentially affected by CVE-2025-64525 via astro (>=3.0.12, <=5.15.1)
astro NPM version =3.0.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.1.1 and more Source cves: CVE-2025-64525 Source advisory: OSV:GHSA-HR2Q-HP5Q-X767...
Malicious code in boson-build-tachyon-solis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e119e83c2c3e138467e3546a509359259ba2dc5811e76b7bfe8168f86ee3d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177114
Malicious code in polaris-build-event-dotenv-parse-variables npm...
EUVD-2025-176193
Malicious code in stream-build-ganymede-corvus npm...
EUVD-2025-179365
Malicious code in deimos-koa-build-figures npm...
Malicious code in redshift-build-geodynamo-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179951
Malicious code in build-perseus-repository-asteroid npm...
Malicious code in auth0-scripts-slides-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3dd049724262a8f2ef9d0819f09a1d834c89820f442c9d3f8332a4b2806f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...