183 matches found
CVE-2025-55182-Scanner
🔍 CVE-2025-55182-Scanner - 检测并保护您的应用程序 🌟 概述 CVE-2025-55182-Scanner 是一个混合安全扫描器，旨在帮助您识别 https://raw.githubusercontent.com/captain4554/CVE-2025-55182-Scanner/main/scanner/CV-Scanner-v2.4.zip 和 Waku 应用程序中的漏洞。该工具结合了静态代码分析与安全的动态验证，使其非常适合 DevSecOps 工作流程。无论您是开发者还是普通用户，该扫描器都将帮助您保护应用程序免受潜在威胁。 🚀 快速开始 要开始使用...
MAL-2026-16016 Malicious code in cv-train (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63e889d2bfc807902ef5bcd86b6d65b95272587726dda61e4efb63d461fc3b setup.py defines a phonehome function invoked at module top level, so it runs during pip install. The function collects the machine hostname, usernam...
Malicious code in cv-train (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e63e889d2bfc807902ef5bcd86b6d65b95272587726dda61e4efb63d461fc3b setup.py defines a phonehome function invoked at module top level, so it runs during pip install. The function collects the machine hostname, usernam...
CLEANSTART-2026-QE69630 Security fixes in kubernetes-csi-external-snapshotter-fips 8.5.0-r0
Package kubernetes-csi-external-snapshotter-fips version 8.5.0-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27139, CVE-2026-27142...
MINI-V5CV-QPV2-V432
Bulletin has no description...
MINI-4GRC-W528-8CV8
Bulletin has no description...
MINI-P5CV-VVP8-FJWG
Bulletin has no description...
CVE-2026-8139
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with vector...
SUSE CVE-2018-7712
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because size.height = 120 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can...
GHSA-PCRH-GJ77-J4MW Concrete CMS is vulnerable to Stored XSS via external-link page cvName
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized...
CVE-2026-8139
Concrete CMS versions 9.5.0 and earlier are vulnerable to stored XSS on the external-link page cvName due to updateCollectionAliasExternal bypassing sanitization. The issue is triggered by the sanitize bypass in updateCollectionAliasExternal, enabling stored scripts delivered to users. Affected p...
EUVD-2026-30253
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...
CVE-2026-6271: Unrestricted Upload of File with Dangerous Type
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...
RHEL 9 : containernetworking-plugins (RHSA-2026:9109)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:9109 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network interfac...
MINI-CV9J-FXGF-6VRP
Bulletin has no description...
MINI-FCMV-88CV-9G62
Bulletin has no description...
BlackSanta Malware Targets HR Staff with Fake CV Downloads
Aryaka researchers have identified a new threat from a Russian-speaking group using 'BlackSanta' malware. By disguising attacks as job applications, hackers are bypassing security to target recruitment workflows...
EUVD-2014-1205
Malware in sbrugna...