MAL-2025-9478 Malicious code in @taktikangea/saepe-ex-occaecati (npm)

The package @taktikangea/saepe-ex-occaecati was found to contain malicious code...

MAL-2025-7302 Malicious code in @crabas0npm/ex-vel-sunt (npm)

The package @crabas0npm/ex-vel-sunt was found to contain malicious code...

MAL-2025-7554 Malicious code in @crabas0npm/sequi-sequi-ex (npm)

The package @crabas0npm/sequi-sequi-ex was found to contain malicious code...

MAL-2025-7880 Malicious code in @erboladaiteas/ex-excepturi-neque-perferendis (npm)

The package @erboladaiteas/ex-excepturi-neque-perferendis was found to contain malicious code...

MAL-2025-7301 Malicious code in @crabas0npm/ex-molestiae-laudantium (npm)

The package @crabas0npm/ex-molestiae-laudantium was found to contain malicious code...

MAL-2025-7303 Malicious code in @crabas0npm/ex-velit-cupiditate (npm)

The package @crabas0npm/ex-velit-cupiditate was found to contain malicious code...

MAL-2025-8149 Malicious code in @kollusietea/cum-ad-aspernatur-ex (npm)

The package @kollusietea/cum-ad-aspernatur-ex was found to contain malicious code...

MAL-2025-9156 Malicious code in @patrten/alias-eligendi-ex (npm)

The package @patrten/alias-eligendi-ex was found to contain malicious code...

MAL-2025-7299 Malicious code in @crabas0npm/ex-aut-magni (npm)

The package @crabas0npm/ex-aut-magni was found to contain malicious code...

MAL-2025-9248 Malicious code in @povsicoenpm/illum-ex-totam-voluptatem (npm)

The package @povsicoenpm/illum-ex-totam-voluptatem was found to contain malicious code...

Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005588 fixes several issues. The following security issues were fixed: CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. CVE-2024-53173:...

PT-2025-33662 · Gnu +1 · Gpac +1

Уязвимость функции gf filter pid resolve file template ex утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2025-7200

A vulnerability, which was classified as critical, was found in krishna9772 Pharmacy Management System up to a2efc8442931ec9308f3b4cf4778e5701153f4e5. Affected is an unknown function of the file quantityupd.php. The manipulation of the argument medname/medcat/exdate leads to sql injection. It is...

CVE-2024-7608

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal...

CVE-2024-3873

A vulnerability was found in SMI SMI-EX-5414W up to 1.0.03. It has been classified as problematic. This affects an unknown part of the component Web Interface. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-24548

Payment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise using Payment EX...

CVE-2024-41617

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to Incorrect Access Control. The redirectifnotloggedin function in functionssecurity.php fails to terminate script execution after redirecting unauthenticated users. This flaw allows an unauthenticated attacker to upload arbitrary...

CVE-2023-3834

A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be...

CVE-2022-24177

A cross-site scripting XSS vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-25034

eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sortby, searchURL, or searchattachment parameter to the email search feature...