Discourse 安全漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email, and chat rooms. A security vulnerability exists in Discourse versions prior to 3.5.3, prior to 2025.11.1, and prior to 2025.12.0, which stems from an...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992674 advisory. In the Linux kernel, the following vulnerability has been resolved: fix bitmap corruption on closerange with CLOSERANGEUNSHARE copyfdbitmapsnew, old, count is expect...

PT-2025-53799

Name of the Vulnerable Software and Affected Versions Mobile Builder versions through 1.4.2 Description Mobile Builder is susceptible to an authentication bypass, allowing authentication abuse. This allows attackers to gain full control without valid credentials. The issue concerns a completely...

PT-2025-53686

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to Build 9413 Description A critical vulnerability exists in SmarterTools SmarterMail that allows unauthenticated attackers to upload arbitrary files to any location on the mail server, potentially...

EUVD-2025-205435

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...

📄 Backdoor.Win32.Poison.jh Remote File Hijack

This code represents an educational Metasploit module concept that demonstrates how insecure file permissions created Backdoor.Win32.Poison.jh could be abused to achieve code execution. The scenario assumes that the malware drops an executable file inside a protected Windows directory SysWOW64 wi...

📄 Backdoor.Win32.Poison.jh Insecure File Permissions / Privilege Escalation

This python script demonstrates a local privilege escalation exploit targeting a vulnerability in the Backdoor.Win32.Poison.jh malware sample. The exploit leverages insecure file permissions created by the malware itself, allowing any local user to replace the malicious executable with arbitrary...

btrfs: fix racy bitfield write in btrfs_clear_space_info_full()

...

ChurchCRM Event Participant Editor SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the event participant editor. An attacker can exploit the vulnerability to cause a full database disclosure and...

CVE-2022-50738 vhost-vdpa: fix an iotlb memory leak

In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix an iotlb memory leak Before commit 3d5698793897 "vhost-vdpa: introduce asid based IOTLB" we called vhostvdpaiotlbunmapv, iotlb, 0ULL, 0ULL - 1 during release to free all the resources allocated when processing use...

MAL-2026-170 Malicious code in secguest-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...

📄 MagnusBilling 6 Server-Side Request Forgery / Path Traversal

Proof of concept exploit for MagnusBilling 6 vulnerabilities including server-side request forgery, path traversal, and cryptographic weaknesses. ============================================================================================================================================= | Title :...

MAL-2025-192760 Malicious code in supply_chain_dummy_test_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...

Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

Malicious code in qxytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8a49d4366751e26ed3fc66c1a478073c6d45eb5c8b92975a4827491e8ab108 The package qxytest was found to contain malicious code. Source: ghsa-malware f6079d7fcf20fd88c7195d9f4b2e7f2fcde1e43e6783075abae2b7450da08cfe Any...

Malicious code in excluder-mcp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8a4074afa107f60ef1b93a1b5ad90b034338e5d94eed6d5b1e27fa583b96e The package excluder-mcp-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192748 Malicious code in lotusbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f2dbbd6b5a88d7702bb519fe20f7f45ab5c4cf430900ca16912d055a6e2f3b The package lotusbail was found to contain malicious code. Source: ghsa-malware 9a89a3feaf56d39c9a953fb5de2e0f4ae6176dce75ee9d95baddc8ef83e59b91 Any...

Malicious code in @aa-techops-ui/ping-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d523ddbefc7a817d1b6a431d5f9d0aca24fecc12ef57ce37915df0a88af3f132 The package @aa-techops-ui/ping-authentication was found to contain malicious code. Source: ghsa-malware...

EUVD-2023-60249

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...

📄 Backdoor.Win32.Poison.jh MVID-2025-0704 Insecure Permissions

Backdoor.Win32.Poison.jh malware creates the directory 28463 under C:\Windows\SysWOW64, granting Full F permissions to the Everyone user group. This allows any local user to modify or replace any dropped files, enabling trivial malware disruption or execution hijacking. This reflects poor...