3235 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-22881
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in...
Linux Distros Unpatched Vulnerability : CVE-2021-27919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service panic upon attempted use of the Reader.Open API for a ZIP archive in which...
CVE-2025-9096 ExpressGateway express-gateway REST Endpoint apps.js cross site scripting
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-8995
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...
CVE-2025-9028 code-projects Online Medicine Guide adphar.php sql injection
A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /adphar.php. Executing manipulation of the argument phuname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
Code-Projects Simple Cafe Ordering System 注入漏洞
Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this...
Malicious code in airship.com (npm)
The package airship.com was found to contain malicious code...
Malicious code in z..z (npm)
The package z..z was found to contain malicious code...
MAL-2025-40708 Malicious code in z..z (npm)
The package z..z was found to contain malicious code...
MAL-2025-7137 Malicious code in @corptools-frontend/northwestregisteredagent.com (npm)
The package @corptools-frontend/northwestregisteredagent.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-9943 Malicious code in @zalastax/nolb-_dot (npm)
The package @zalastax/nolb-dot was found to contain malicious code...
Malicious code in begin.com (npm)
The package begin.com was found to contain malicious code...
UBUNTU-CVE-2025-50817
A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker...
CVE-2025-8462
The RT Easy Builder – Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-50817
Removed by vendor...
CVE-2011-10012 NetOp Remote Control Client 9.5 .dws File Buffer Overflow
NetOp now part of Impero Software Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute...
CVE-2025-50615
A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...
CVE-2025-50614
A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wdsset in the payload, which can cause the program to crash and potentially lead to a Denial...
CVE-2025-40751
A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.3. Affected SIMATIC RTLS Locating Manager Report Clients do not properly protect credentials that are used to authenticate to the server. This could allow an authenticated local attacker to extract the credential...