38244 matches found
CVE-2025-57266
ThriveX Blogging Framework versions 2.5.9 through 3.1.3 contain an unauthenticated information disclosure in AssistantController.java, exposing sensitive data (e.g., API Keys) via the /api/assistant/list endpoint. Publicly available documents (NVD, Red Hat, CVE listings) corroborate the issue and...
gauntlt
This is an offensive tool for web application security testing. It is a ruggedization framework that enables security testing that is usable by devs, ops, and security. The tool is called Gauntlt. The target product/service or framework is not explicitly stated, but based on the examples provided...
evilgrade
Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates...
Exploit for CVE-2022-36537
CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...
PT-2025-39765
Name of the Vulnerable Software and Affected Versions WordPress Search Exclude plugin versions up to and including 2.5.7 Description The WordPress Search Exclude plugin contains a flaw that allows unauthorized modification of data. This is due to an inadequate capability check within the Base::ge...
GNUnet P2P Framework 0.25.1
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
Obsidian-framework
Obsidian Framework 🛡️ An advanced, template-driven se...
OESA-2025-2354 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
PoC exploit for CVE-2023-45612, a XXE vulnerability. The target...
Malicious code in com.unity.test-framework.utp-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47643 Malicious code in com.unity.test-framework.utp-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in com.unity.test-framework.graphics.performance (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47642 Malicious code in com.unity.test-framework.graphics.performance (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in com.unity.test-framework.build (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47638 Malicious code in com.unity.spatial-framework-core (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in com.unity.spatial-framework-core (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in com.unity.gis.high-precision-framework (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47630 Malicious code in com.unity.gis.high-precision-framework (npm)
--- -= Per source details. Do not edit below this line.=-...
USN-7775-2: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...
USN-7769-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...