CVE-2025-10106

CVE-2025-10106 affects yanyutao0402 ChanCMS up to version 3.3.1. The vulnerability resides in an unknown part of the file /cms/collect/search, where manipulating the keyword parameter enables SQL injection. The issue is exploitable remotely and the exploit has been publicly disclosed. Multiple co...

CVE-2025-10105

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/search. This manipulation of the argument keyword causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-10105

CVE-2025-10105 affects chanCMS (yanyutao0402) up to version 3.3.1. The vulnerability is in the /cms/article/search functionality where manipulation of the keyword parameter enables SQL injection. The issue is exploitable remotely and an exploit has been published. The CVSS data indicate high seve...

ChanCMS SQL注入漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. SQL injection vulnerability exists in ChanCMS 3.3.1 and earlier versions, the vulnerability stems from incorrect manipulation of inputs leading to SQL injection...

Linux Distros Unpatched Vulnerability : CVE-2019-18790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21...

Malicious code in jake-chan (npm)

The package jake-chan was found to contain malicious code...

MAL-2025-7035 Malicious code in 8chan (npm)

The package 8chan was found to contain malicious code...

MAL-2025-23592 Malicious code in jake-chan (npm)

The package jake-chan was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2018-20449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hidmachanstats function in drivers/dma/qcom/hidmadbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading...

CVE-2025-8266

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical. Affected by this vulnerability is the function getArticle of the file app/modules/cms/controller/collect.js. The manipulation of the argument targetUrl leads to deserialization. The attack can be launch...

PT-2025-27420

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A heap overwrite issue has been identified in the Linux kernel, specifically in the drivers/rapidio/rio cm.c file. The problem arises from the riocm ch send function not checking if...

CVE-2024-39659

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Stored XSS.This issue affects WP-PostRatings: from n/a through 1.91.1...

DEBIAN-CVE-2022-49753

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix double increment of clientcount in dmachanget The first time dmachanget is called for a channel the channel clientcount is incorrectly incremented twice for public channels, first in balancerefcount, and again prio...

CVE-2020-5282

In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the npm command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta...

WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions = 1.2...

WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan in WordPress Plugin WP Go Maps versions = 9.0.40...

WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by Joshua Chan in WordPress Plugin Wp-Scribd-List versions = 1.2...

WordPress Google Ads Reports plugin <= 3.1 - Information Exposure vulnerability

Information Exposure vulnerability discovered by Joshua Chan in WordPress Plugin Muzaara Google Ads Report versions = 3.1...

WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto versions = 8.0.6...

UBUNTU-CVE-2024-56752

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100grchannew When the call to gf100grctxgenerate fails, unlock gr-fecs.mutex before returning the error. Fixes smatch warning: drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480...