Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link r:link attribute instead of embedded r:embed. The library resolves the URI to a file path and afte...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link r:link attribute instead of embedded r:embed. The library resolves the URI to a file path and afte...

Mattermost Desktop App 安全漏洞

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.13.0 and earlier, which originates from an unauthenticated external URL and could allow an attacker to crash the application by sending a specially...

EUVD-2017-10004

Malware in sbrugna...

EUVD-2010-2050

Malware in sbrugna...

EUVD-2017-4496

Malware in sbrugna...

EUVD-2023-32300

Malicious code in bioql PyPI...

EUVD-2022-5594

Malicious code in bioql PyPI...

EUVD-2023-53694

Malicious code in bioql PyPI...

EUVD-2023-53693

Malicious code in bioql PyPI...

EUVD-2025-24213

Malicious code in bioql PyPI...

CVE-2025-57318

creationtimestamp| type| source ---|---|--- 2025-09-25 05:23:42+00:00| seen| https://gist.github.com/Darkcrai86/dd2d95d37934e5b8a53d18e11401236a...

Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages

Summary We identified a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating ...

CVE-2025-42918

creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...

CVE-2025-43886

creationtimestamp| type| source ---|---|--- 2025-09-10 17:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiqlwltpw2j...

Linux Distros Unpatched Vulnerability : CVE-2023-28636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrat...

CVE-2025-9771

creationtimestamp| type| source ---|---|--- 2025-09-01 12:57:41+00:00| seen| https://gist.github.com/Darkcrai86/0c6d3860c036f3e19a61b922456e2809 2025-09-01 13:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrpj5hrqw2r...

We Are Still Unable to Secure LLMs from Malicious Inputs

Nice indirect prompt injection attack: Bargury's attack starts with a poisoned document, which is shared to a potential victim's Google Drive. Bargury says a victim could have also uploaded a compromised file to their own account. It looks like an official document on company meeting policies. Bu...

Linux Distros Unpatched Vulnerability : CVE-2024-22262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the...

CVE-2025-42941

SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...