CVE-2024-7695 Out-of-bounds Write Vulnerability

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

PT-2025-5043 · Quote · Quote

Name of the Vulnerable Software and Affected Versions: Quote me versions 1.0 and below Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables attackers to inject malicious...

CVE-2025-21566

...

CVE-2025-21563

CVE-2025-21563 affects Oracle PeopleSoft, Run Control Management in the CC Common Application Objects component (PeopleSoft 9.2). The issue allows a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletes on affected data. Root cause details are n...

CVE-2025-21547

Oracle Hospitality OPERA 5 vulnerability CVE-2025-21547 affects Opera Servlet in Oracle Hospitality OPERA 5, versions 5.6.19.20, 5.6.25.8, 5.6.26.6, and 5.6.27.1. An unauthenticated attacker with network access via HTTP can compromise OPERA 5, potentially gaining unauthorized access to all data o...

CVE-2025-21533

...

CVE-2025-21524

...

CVE-2025-21510

CVE-2025-21510 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.0. An unauthenticated, network-accessible (HTTP) attacker can compromise data or gain full access to Tools. Fixed in 9.2.9.x line; NCSC notes 9.2.9.2; Oracle CPU Jan 2025 advisory references patches. Exp...

CVE-2025-21501

CVE-2025-21501 is a vulnerability in Oracle MySQL’s Server: Optimizer component affecting MySQL Server versions 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The issue allows low-privilege, network-access attackers to cause a hang or frequent crash (availability impact: high), i.e...

CVE-2025-21497

...

CVE-2025-21494

...

MAL-2025-270 Malicious code in aem-spa-component-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-199 Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-P54P-P3QM-8VGJ vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

MAL-2025-86 Malicious code in efergvthdaadgfhrgewsfqwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 894602cb30d010a59a8a636fbe8301d38272737acaab1eac0ccd85996644fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12030 Malicious code in rdjjfjooirpp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0def3cb04d3fb8c638daf6a97a708bd6b95632da63635563110d5827170cfff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11976 Malicious code in eritiopitop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15b644f2a4d79a062d6c3a7af975bc368236569d54382196034bcb9a8f42938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12048 Malicious code in tournament_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51c146ed2933a7f62a56c8bcf7aca713a310334900137f2667c9dbafbfb204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11287 Malicious code in a39a85e7 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11131 Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...