EUVD-2023-53694

Malicious code in bioql PyPI...

EUVD-2022-5594

Malicious code in bioql PyPI...

EUVD-2025-24213

Malicious code in bioql PyPI...

EUVD-2023-53693

Malicious code in bioql PyPI...

CVE-2025-57318

creationtimestamp| type| source ---|---|--- 2025-09-25 05:23:42+00:00| seen| https://gist.github.com/Darkcrai86/dd2d95d37934e5b8a53d18e11401236a...

Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages

Summary We identified a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating ...

CVE-2025-42918

creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...

CVE-2025-43886

creationtimestamp| type| source ---|---|--- 2025-09-10 17:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiqlwltpw2j...

Linux Distros Unpatched Vulnerability : CVE-2023-28636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrat...

CVE-2025-9771

creationtimestamp| type| source ---|---|--- 2025-09-01 12:57:41+00:00| seen| https://gist.github.com/Darkcrai86/0c6d3860c036f3e19a61b922456e2809 2025-09-01 13:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrpj5hrqw2r...

We Are Still Unable to Secure LLMs from Malicious Inputs

Nice indirect prompt injection attack: Bargury's attack starts with a poisoned document, which is shared to a potential victim's Google Drive. Bargury says a victim could have also uploaded a compromised file to their own account. It looks like an official document on company meeting policies. Bu...

Linux Distros Unpatched Vulnerability : CVE-2024-22262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the...

CVE-2025-42941

SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...

CVE-2025-55166

The CVE-2025-55166 issue affects the PHP SVG sanitizer project svg-sanitizer. Before version 0.22.0, the cleanXlinkHrefs function only searches for lower-case attribute names, allowing bypass of the isHrefSafeValue check and enabling cross-site scripting or linking to external domains. A fix is a...

CVE-2025-42941

SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...

CVE-2025-42941 Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)

SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...

Linux Distros Unpatched Vulnerability : CVE-2017-6932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in...

GHSA-3P86-9955-H393

creationtimestamp| type| source ---|---|--- 2025-07-16 04:52:26+00:00| seen| https://gist.github.com/safer-bot/de1d2f168ac8c68d04050981a1883ee7 2025-07-16 05:57:09+00:00| seen| https://gist.github.com/safer-bot/15d6661c566b3f7011158e747a52036b 2025-07-16 21:40:14+00:00| seen|...

PT-2025-28854 · Undefined · Undefined

CVE-2025-53687 Rejected reason https://t.co/tDWKrpwRVz...

DNN 安全漏洞

DNN aka DotNetNuke is a Microsoft-supported, open-source content management system CMS based on the ASP.NET platform from the U.S. company DNN. The system is easy to install, scalable, feature-rich and so on. A security vulnerability exists in DNN versions prior to 9.13.9, which originates from a...