CVE-2025-55133

CVE-2025-55133 affects Agora Foundation Agora fall23-Alpha1 prior to build b087490 , with a cross-site scripting (XSS) flaw exposed via the topicName parameter in client/agora/public/js/editorManager.js . The underlying issue is improper handling of topicName leading to script injection. The CVSS...

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

CVE-2025-55135

CVE-2025-55135 affects Agora Foundation Agora fall23-Alpha1 prior to patch 690ce56. The issue stems from insufficient file type validation in server/routes/userRoutes.js, allowing non-supported formats (including SVG) for profile pictures and enabling XSS via server/controller/userController.js. ...

CVE-2025-55135

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...

CVE-2025-55134

Affected software: Agora Foundation fall23-Alpha1 (pre-b087490). The vulnerability is a client-side cross-site scripting (XSS) in editorManager.js caused by improper handling of the tag parameter. Impact is XSS exposure via that field; no exploitation details are provided beyond this. Mitigation:...

PT-2025-32269 · Unknown · Agora Foundation

Name of the Vulnerable Software and Affected Versions: Agora Foundation Agora fall23-Alpha1 versions prior to 690ce56 Description: The application permits file formats other than PNG, JPEG, and WEBP for profile pictures, including SVG. This allows for cross-site scripting XSS via a crafted profil...

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6429 Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

firefox: thunderbird: Incorrect JavaScript state machine for generators

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The JavaScript engine did not handle closed generators correctly, and it was possible to resume them, resulting in a nullptr dereference...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage

Model compression is crucial for minimizing memory storage and accelerating inference in deep learning DL models, including recent foundation models like large language models LLMs. Users can access different compressed model versions according to their resources and budget. However, while existi...

Support for AWS Elastic VMware Service (EVS) with Veeam Backup & Replication

Support Statement Veeam Backup & Replication fully supports AWS Elastic VMware Service EVS, treating it as a standard vSphere environment. Built on VMware Cloud Foundation VCF 5.2.x, EVS provides customers with comprehensive administrative access to vCenter, NSX, and other essential VMware...

The vulnerability in the virtual network adapter VMXNET3 of VMware ESXi, Workstation, Fusion, and Cloud Foundation exists due to a write-off outside the buffer, allowing an attacker to execute arbitrary code.

The vulnerability in the virtual network adapter VMXNET3 of VMware ESXi, Workstation, Fusion, and Cloud Foundation software lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Virtual Machine Communication Interface (VMCI) implementation in software products such as VMware ESXi, Workstation, Fusion, and Cloud Foundation allows a perpetrator to execute arbitrary code.

The vulnerability of the Virtual Machine Communication Interface VMCI implementation in software products such as VMware ESXi, Workstation, Fusion, and Cloud Foundation lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2025-29594 · Oracle · Oracle Crm Technical Foundation +1

Name of the Vulnerable Software and Affected Versions: Oracle CRM Technical Foundation versions 12.2.11 through 12.2.13 Description: An easily exploitable issue exists in the Oracle CRM Technical Foundation component Preferences of Oracle E-Business Suite. A high-privileged attacker with network...