EUVD-2023-31661

Malicious code in bioql PyPI...

EUVD-2023-39867

Malicious code in bioql PyPI...

EUVD-2021-31080

Malicious code in bioql PyPI...

EUVD-2022-6406

Malicious code in bioql PyPI...

wrflib has a soundness issue and is unmaintained

All functions under wrflib::byteextract are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. wrflib is unmaintained...

CVE-2025-10212

CVE-2025-10212 concerns the SiteAlert (Formerly WP Health) WordPress plugin. Connected documents confirm a missing capability check in multiple functions across versions up to and including 1.9.8, allowing unauthenticated access to site health information (e.g., installed/outdated plugins, PHP an...

CVE-2025-10212 SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure

The SiteAlert Formerly WP Health plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.9.8. This makes it possible for unauthenticated attackers to view the site health information, includi...

PT-2025-40469

Name of the Vulnerable Software and Affected Versions SiteAlert Formerly WP Health plugin for WordPress versions through 1.9.8 Description The software is susceptible to unauthorized data access because of a missing capability check in several functions. This allows unauthenticated attackers to...

WordPress plugin Constructor 安全漏洞

WordPress Constructor plugin is a framework for simplifying plugin development, mainly used to help developers quickly build and manage the plugin's components such as options pages, forms and custom fields. WordPress Constructor plugin suffers from a privilege issue vulnerability that stems from...

WordPress plugin SiteAlert 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

The vulnerability of the Suricata intrusion detection and prevention system lies in the improper security checks for standard elements, which allows attackers to bypass existing security mechanisms or cause service failures.

The vulnerability of the Suricata intrusion detection and prevention system is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms or cause service failures by sending specially crafted SYN...

Cursor 安全漏洞

Cursor is an AI code editor from Cursor Open Source. A security vulnerability exists in Cursor 1.6.23 and earlier versions, which stems from insufficient case-sensitive checking and could lead to remote code execution...

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

The vulnerability of the formSetServerConfig() function in the Tenda AC8V4 router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formSetServerConfig function in the Tenda AC8V4 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CLSA-2025-1759420505 Fix CVE(s): CVE-2025-55212

SECURITY UPDATE: denial of Service vulnerability due to zero dimensions crash - debian/patches/CVE-2025-55212.patch: Fix invalid width or height checks in ThumbnailImage method and add safe reciprocal function to avoid division by zero - CVE-2025-55212...

soundness issue and unmaintained

All functions under wrflib::byteextract are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. wrflib is unmaintained...

CVE-2025-39924

In the Linux kernel, the following vulnerability has been resolved: erofs: fix invalid algorithm for encoded extents The current algorithm sanity checks do not properly apply to new encoded extents. Unify the algorithm check with ZEROFSCOMPRESSIONRUNTIMEMAX and ensure consistency with...

CVE-2025-39926

In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genlbind invoking bind after -EPERM Per family bind/unbind callbacks were introduced to allow families to track multicast group consumer presence, e.g. to start or stop producing events depending on listeners...

GTONE ChangeFlow 安全漏洞

GTONE ChangeFlow is an application change management software from GTONE Korea. A security vulnerability exists in GTONE ChangeFlow v9.0.1.1 and prior versions, which stems from improper pathname restriction and missing integrity checking of code downloads, which could lead to path traversal...

LangBot 代码问题漏洞

LangBot is a large model of LangBot open source instant messaging bot development platform. A code issue vulnerability exists in LangBot versions 4.1.0 through 4.3.5, which stems from the /api/v1/files/documents interface not strictly limiting the server file storage directory, which could lead t...