Contrast leaks workload secrets to logs on INFO level

This is the same vulnerability as https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8. The original vulnerability had been fixed for release v1.8.1, but the fix was not ported to the main branch and thus not present in releases v1.9.0 ff. Below is a brief repetition of...

MAL-2025-41522 Malicious code in @twork-data-services/proxy-prime-api-v2-get-cu-products-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41518 Malicious code in @twork-data-services/proxy-prime-api-v1-balances-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41516 Malicious code in @twork-data-services/proxy-prime-api-v1-account-overdraft-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41513 Malicious code in @twork-data-services/proxy-prime-acc-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41511 Malicious code in @twork-data-services/proxy-invest-v2-api-v2-broker-account-customer-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41506 Malicious code in @twork-data-services/proxy-invest-api-v1-futures-info-single (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41485 Malicious code in @twork-data-services/company-tariff-info (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-35149

Name of the Vulnerable Software and Affected Versions itsourcecode Apartment Management System version 1.0 Description A vulnerability exists in the processing of the file /report/bill info.php. Manipulation of the vid argument results in SQL injection. Remote exploitation is possible. The exploi...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/complaininfo.php. An attacker can exploit this...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/billinfo.php. An attacker can exploit this vulnerability...

PT-2025-35152

Name of the Vulnerable Software and Affected Versions itsourcecode Apartment Management System version 1.0 Description A SQL injection issue exists in itsourcecode Apartment Management System version 1.0. The issue is located in the /report/complain info.php file, within an unknown function...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2025-9523

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-30060

The CVE-2025-30060 entry describes a SQL injection vulnerability in the ReturnUserUnitsXML.pl service, where the getUserInfo function is exploitable through the UserID parameter. Root cause: unsanitized user input in a SQL query (UserID) leading to unauthorized data access or modification. Impact...

CVE-2025-9508

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...

CVE-2025-9509 itsourcecode Apartment Management System fair_info_all.php sql injection

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-9508 itsourcecode Apartment Management System rented_info.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...

CVE-2025-9508

The CVE-2025-9508 entry concerns itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /report/rented_info.php caused by manipulation of the rsid parameter. It is exploitable remotely and public exploits exist. Multiple connected sources confirm the same i...