DataEase 代码问题漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A code issue vulnerability exists in DataEase 2.10.12 and prior versions that...

CVE-2025-10246

A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b4e4bab3c. This affects an unknown part of the file /f.php. This manipulation of the argument h causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-10246

The CVE-2025-10246 entry concerns lokibhardwaj PHP-Code-For-Unlimited-File-Upload. Affected component: the file /f.php, where manipulation of the parameter h enables cross-site scripting. Impact: remote exploitation is possible; exploits have been publicly disclosed. The issue references versions...

CVE-2025-10246 lokibhardwaj PHP-Code-For-Unlimited-File-Upload f.php cross site scripting

A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b4e4bab3c. This affects an unknown part of the file /f.php. This manipulation of the argument h causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-10246 lokibhardwaj PHP-Code-For-Unlimited-File-Upload f.php cross site scripting

A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b4e4bab3c. This affects an unknown part of the file /f.php. This manipulation of the argument h causes cross site scripting. Remote exploitation of the attack is possible. The...

PHP-Code-For-Unlimited-File-Upload 代码注入漏洞

PHP-Code-For-Unlimited-File-Upload is a software used for multiple file transfers by the individual developer Lokesh Kumar. A code injection vulnerability exists in PHP-Code-For-Unlimited-File-Upload, which stems from the incorrect manipulation of the parameter h in the file /f.php, which could...

PT-2025-37113

Name of the Vulnerable Software and Affected Versions: lokibhardwaj PHP-Code-For-Unlimited-File-Upload versions up to 124fe96324915490c81eaf7db3234b0b4e4bab3c Description: A weakness exists in the file /f.php within the software. Manipulation of the argument h can lead to cross-site scripting...

Linux Distros Unpatched Vulnerability : CVE-2016-0842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation MMCO data, which allows remote attackers to...

2025-09 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5065429)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

CVE-2025-58837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

Malicious code in @zalastax/nolb-lion-h (npm)

The package @zalastax/nolb-lion-h was found to contain malicious code...

MAL-2025-43317 Malicious code in @zalastax/nolb-lion-h (npm)

The package @zalastax/nolb-lion-h was found to contain malicious code...

CVE-2025-58837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiful H SS Font Awesome Icon ss-font-awesome-icon allows Stored XSS.This issue affects SS Font Awesome Icon: from n/a through = 4.1.3...

Linux Distros Unpatched Vulnerability : CVE-2023-43281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain functio...

CVE-2025-57772

CVE-2025-57772 affects DataEase prior to 2.10.12. A H2 JDBC RCE bypass exists where the getJdbcUrl method can return the JdbcUrl parameter, bypassing H2 filtering and allowing the JDBC URL to specify the driver (e.g., driver: org.h2.Driver) for the connection. This leads to potential remote code ...

[SECURITY] Fedora 41 Update: rust-h2-0.4.12-1.fc41

An HTTP/2 client and server...

[SECURITY] Fedora 42 Update: rust-h2-0.4.12-1.fc42

An HTTP/2 client and server...

Fedora 42 : rust-h2 / uv (2025-c22dd590b8)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-c22dd590b8 advisory. - Update uv to version 0.8.8. - Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368. Tenable has extracted the...

CVE-2025-8143 Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'

The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pcsmlsmartlistsh’ parameter in all versions up to, and including, 8.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

WordPress Soledad theme <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'pcsmlsmartlistsh' vulnerability discovered by stealthcopter in WordPress Theme Soledad versions = 8.6.7...