org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: SNYK:JAVA-ORGXWIKIRENDERING-10743086...

org.xwiki.rendering:xwiki-rendering-legacy-transformation-macro (>=14.6-rc-1, <=14.9), org.xwiki.rendering:xwiki-rendering-macro-box (>=14.5, <=14.9) +12 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.5, <=14.9)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.5, =14.6-rc-1, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.9 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: OSV:GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

CVE-2025-53818 github-kanban-mcp-server Command Injection vulnerability

GitHub Kanban MCP Server is a Model Context Protocol MCP server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Serv...

GitHub Kanban MCP Server: Operating System Command Injection Vulnerability

GitHub Kanban MCP Server is an application for Maki Personal Developers. An operating system command injection vulnerability exists in GitHub Kanban MCP Server version 0.4.0, which stems from a command injection in the addcomment tool...

Malware in comment-on-task-github-action

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-6702

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6702 linlinjava litemall post improper authorization

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6702: Improper Authorization

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

litemall security vulnerability

litemall is a small shopping mall system for linlinjava individual developers. A security vulnerability exists in litemall version 1.8.0, which stems from improper authorization due to misuse of the parameter adminComment in the file /wx/comment/post...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

Vulnerabilities fixed in IBM InfoSphere Information Server

IBM has fixed vulnerabilities in IBM InfoSphere Information Server Versions 11.7.0.0 to 11.7.1.6. The first vulnerability involves a Denial-of-Service vulnerability that stems from insufficient validation of incoming request sources. This can be exploited to disrupt service availability. The seco...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-3629 IBM InfoSphere Information Server file manipulation

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-6302

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Comment leads to stack-based buffer overflow. It is possible to launch the attack...

PT-2025-26504 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue allows an authenticated user to delete another user's comments due to improper ownership management. Recommendations: For versions 11.7.0.0 through...