External Secrets 访问控制错误漏洞

External Secrets is a Kubernetes-related application in the External Secrets open source. An access control error vulnerability exists in External Secrets versions 0.10.1 through 0.19.2, which stems from an unvalidated namespace context or keystore type, and could lead to unauthorized...

PT-2025-41535

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software contains a flaw related to the inclusion of functionality from an untrusted control sphere. Specifically, the application allows loading third-party scripts without proper integrity checks or...

MAL-2025-48248 Malicious code in mad-1.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612d2c6761b96cd5e5e8c88a54cd3432e05c78ce108a922ff057dfea48b6b951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0a5225829fc638c078c685eb6af4bed3caed292f068beb8b26ce84158e7cbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48245 Malicious code in mad-1.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3660341162df2e49bb5407e0ca9b3bd7df2ef2e7aaf9c8cd43ac899b45d29b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.1.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b7ae35d8522c82d7af230bc72f76eafab00194667d0a543b69f62c609e769b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-x2giv7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949ffee0c03450b4909e3996235aef4df042da23288be3f79bdb7a9357dcade4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48152 Malicious code in redirect-e19jye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a6122a3af15da86678978370ddd69e455fa6bf90a36c33791a482a7c003d106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48129 Malicious code in redirect-63cl4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-shqv6v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b4e79ff7698297acecee22b28fce7722c6c7173e739ee265fae8cc583dee68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-thzyis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb1ca436020478ea4097dedee0cdf233b13e7c6a6a228b80047ae972166d44bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48117 Malicious code in redirect-2aie58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4326d6ad5f6f6803c0cda761a364775547e60918fa3636368f1e60aab3bfb4fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33363

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-Of-Service DoS. When an affected system receives a specific BGP EVPN updat...

CVE-2025-60004 Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-Of-Service DoS. When an affected system receives a specific BGP EVPN updat...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

Code-Projects Online Complaint Site SQL注入漏洞

Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Category in the file /admin/category.php. An attacker can exploit this vulnerabilit...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

MAL-2025-48073 Malicious code in redirect-rc2ewa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1ffda65105f619c869543d8f7b50b73dff1fd865a8cbec013927540e90031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-dravb9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada24832ca1483913a8a5287458635e479ea1d11ba7809f73dd45d30dc08ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...