MAL-2025-1570 Malicious code in all.en.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c395f6ed37dd1a8e6b2b15422babd65aa6c8f28456ef07e8951ac7ede5c47173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2025-21738

In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSIIOCTLSENDCOMMAND ioctl with outlen set to 0xd42, SCSI command set to ATA16 PASS-THROUGH, ATA command set to ATANOP, and...

SUSE CVE-2022-49157

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS to give the resume...

SUSE CVE-2022-49504

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Inhibit aborts if external loopback plug is inserted After running a short external loopback test, when the external loopback is removed and a normal cable inserted that is directly connected to a target device, the...

CVE-2024-12918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Health4All allows SQL Injection. This issue affects Health4All: before 10.01.2025...

CVE-2024-12917

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025...

DEBIAN-CVE-2022-49536

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock During stress I/O tests with 500+ vports, hard LOCKUP call traces are observed. CPU A: nativequeuedspinlockslowpath+0x192 rawspinlockirqsave+0x32 lpfchandlefcperr+0x4...

CVE-2024-12916

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

CVE-2024-12917

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025...

CVE-2024-12918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Health4All allows SQL Injection. This issue affects Health4All: before 10.01.2025...

CVE-2024-12918 SQLi in Agito Computer's Health4All

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Health4All allows SQL Injection. This issue affects Health4All: before 10.01.2025...

CVE-2024-12918 SQLi in Agito Computer's Health4All

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Health4All allows SQL Injection. This issue affects Health4All: before 10.01.2025...

CVE-2024-12917 Improper Access Control in Agito Computer's Health4All

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025...

CVE-2024-12917

CVE-2024-12917 concerns Agito Computer Health4All. The issue arises from improperly configured access control security levels, enabling unauthorized access and authentication abuse. Affected software is Health4All prior to version 10.01.2025 (per multiple sources). The root cause is access contro...

CVE-2024-12916 SQLi in Agito Computer's Life4All

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025...

CVE-2024-12916

CVE-2024-12916 concerns an SQL Injection in Agito Computer’s Life4All before 10.01.2025. Connected sources confirm the root cause is improper neutralization of special elements in SQL commands, affecting Life4All installations prior to the stated version. The CVSS metrics indicate high impact acr...

CVE-2024-12916 SQLi in Agito Computer's Life4All

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

PT-2025-7715 · Agito Computer · Life4All

Name of the Vulnerable Software and Affected Versions: Agito Computer Life4All versions prior to 10.01.2025 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Agito Computer Life4All SQL注入漏洞

Agito Computer Life4All is a healthy living application from Agito Computer. A SQL injection vulnerability exists in Agito Computer Life4All versions prior to 10.01.2025 that stems from improper neutralization of special elements in SQL commands...

Agito Computer Health4All 安全漏洞

Agito Computer Health4All is a health management program from Agito Computer. A security vulnerability exists in Agito Computer Health4All versions prior to 10.01.2025 that stems from improperly restricting the accessibility of a file or directory to external parties, resulting in improperly...