CVE-2020-13159

CVE-2020-13159 - Artica Proxy 4.30.000000 Community Edition 以前に、複数の OS コマンドインジェクションの脆弱性 製品説明: Artica Tech は、通常は大企業や多国籍企業向けの、強力かつシンプルなソリューションを提供します。わずか99ユーロからの開始価格で、62,000以上のアクティブサーバーを擁する Artica Proxy は、過去10年間にわたりオープンソースプロジェクトとして開発され、低コストで中小企業や公共団体が組織と従業員をインターネットの危険から守る支援を行ってきました。 説明: Artica Proxy...

-CVE-2025-8088

-CVE-2025-8088 POWERSHELスクリプト - あなたのデバイスが影響を受けているかどうかを確認します 🚨 CVE-2025-8088: WinRAR ゼロデイアラート！ 🚨 深刻なWinRAR脆弱性（CVE-2025-8088）が話題になっています – 攻撃者は、バージョン7.13未満のこの欠陥を悪用し、ユーザーが細工されたアーカイブを開くよう誘導するだけで悪意のあるコードを実行できます。影響は？ システム全体の完全な侵害です。 ✅ 7.13以降でパッチ済み → 古いバージョンを実行している場合、標的になります。 💡...

EUVD-2026-83459

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923: Improper Neutralization of Input During Web Page Generation

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923 SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923 SiYuan through 3.8.4 Stored XSS via Heading Style Attribute

SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints to inject malicious style values that execute in the Electron renderer with fu...

CVE-2026-93923

SiYuan through version 3.8.4 is affected by a stored cross-site scripting (XSS) vulnerability caused by a failure to escape heading style attributes when rendering the outline and bookmark dock HTML. Attackers can inject malicious style values by supplying crafted notebooks or calling administrat...

CVE-2026-92808

CVE-2026-92808 is a server-side request forgery (SSRF) vulnerability in the UnifiedLogin service of Altium Enterprise Server . An unauthenticated network attacker can force the server to issue outbound HTTP requests to arbitrary destinations, including internal services reachable only from the se...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83318

Oracle BI Publisher (part of Oracle Analytics , Administration component) is affected by a network-based vulnerability in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with HTTP network access can exploit this, though exploitation is rated as difficult (h...

EUVD-2026-79323

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to...

The vulnerability of the Internal Operations component of the Oracle Spares Management software allows a perpetrator to gain full control over the system.

The vulnerability of the Internal Operations component of the Oracle Spares Management software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain full control over the system through HTTP requests...

Linux Distros Unpatched Vulnerability : CVE-2026-85979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitra...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to OS command injection (CVE-2025-14754)

Summary IBM Cloud Pak for Data is vulnerable to OS command injection due to improper validation of user-supplied input. An authenticated remote attacker could exploit this vulnerability to execute arbitrary commands with elevated privileges on the system, potentially leading to full system...

MAL-2026-16067 Malicious code in @vallensofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02adc12975b9798883d78640d5cab1a73420818d23fbd192ebb76a384f056d54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software, allowing a hacker to gain full control over the system

The vulnerability of the /goform/telnet file of the Telnet Handler component in the Tenda AC18 microprogramming router software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system...

The vulnerability of the R7WebsSecurityHandler() function in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device, which allows a hacker to gain full control over the system

The vulnerability of function R7WebsSecurityHandler in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device for routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Malicious code in 3layerdipstackc6c5kn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5095fa04b6e4feb276e9a1376a4b4c7644115b5ffc5021f55edbf5c5646d2c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...