PT-2025-35354

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10, specifically within the /module/AreaConhecimento/view file of the Listagem de áreas de conhecimento Page component...

PT-2025-35355

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A security flaw has been discovered in Portabilis i-Educar. The issue affects processing of the file /module/AreaConhecimento/edit of the Listagem de áreas de conhecimento Page component...

CVE-2025-58157 gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm

gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been...

gnark 资源管理错误漏洞

gnark is a fast zk-SNARK library open-sourced by Consensys. for advanced APIs to design circuits. A resource management error vulnerability exists in gnark version 0.12.0, which stems from an improper calculation of the fake-GLV algorithm and could lead to a denial-of-service attack...

PT-2025-35319

Name of the Vulnerable Software and Affected Versions gnark versions prior to 0.13.0 Description gnark is a zero-knowledge proof system framework. A denial of service issue can occur when computing scalar multiplication using the fake-GLV algorithm in versions prior to 0.13.0. This is due to the...

CVE-2025-9594

A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complaininfo.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

graph-rag-poc

Graph RAG Pipeline - Proof of Concept A locally-executable Gr...

Protected Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-101

This module enables you to protect individual pages with a password. The module doesn't limit the number of password attempts, making it vulnerable to brute force attacks. This vulnerability is mitigated by the fact that an attacker must know the protected page's URL. CVSS risk score experimental...

Malicious code in knowledge-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10486375c2c8f9c47bdb66e84e96db62dd623c210713201b53ebd516834bf3e6 The OpenSSF Package Analysis project identified 'knowledge-processor' @ 99.0.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-41302 Malicious code in knowledge-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10486375c2c8f9c47bdb66e84e96db62dd623c210713201b53ebd516834bf3e6 The OpenSSF Package Analysis project identified 'knowledge-processor' @ 99.0.9 npm as malicious. It is considered malicious because: - The packa...

CVE-2025-57801

gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...

CVE-2025-57801

CVE-2025-57801 affects gnark before 0.14.0, where Verify in eddsa.go and ecdsa.go did not enforce 0 ≤ S

CVE-2025-57801 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...

PT-2025-34495

Name of the Vulnerable Software and Affected Versions: gnark versions prior to 0.14.0 Description: gnark is a zero-knowledge proof system framework. The Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleabili...

WordPress PressApps Knowledge Base Contextual Sidebar Addon Plugin <= 4.2.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin PressApps Knowledge Base Contextual Sidebar Addon versions = 4.2.1...

Security Bulletin: Multiple Secuirty vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge

Summary Multiple secuirty vulnerabilities impacting IBM Knowledge Catalog Standard Cartridge. These vulnerabilities had been addressed and customers should update to the recommended version of the product at the earliest opportunity. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel i...

CVE-2025-49400

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in osama.esh WP Visitor Statistics Real Time Traffic allows Stored XSS. This issue affects WP Visitor Statistics Real Time Traffic: from n/a through 8.2...

Adaptive Anomaly Detection in Evolving Network Environments

Distribution shift, a change in the statistical properties of data over time, poses a critical challenge for deep learning anomaly detection systems. Existing anomaly detection systems often struggle to adapt to these shifts. Specifically, systems based on supervised learning require costly manua...

PostgreSQL and PgBouncer Sizing and Configuration Guide

Challenge Jobs or tasks in Veeam Backup for Microsoft 365 fail with the error: Error: EFCoreLogging: An error occurred using the connection to database 'cache2331ace3-eff1-4ebb-b328-0cb948b2f5c5' on server 'tcp://vb365.domain.tld:6432'. Cause These connection errors can occur in larger environmen...

CKM-Assisted Physical-Layer Security for Resilience against Unknown Eavesdropping Location

Channel Knowledge Map CKM is an emerging data-driven toolbox that captures our awareness of the wireless channel and enables efficient communication and resource allocation beyond the state of the art. In this work, we consider CKM for improving physical-layer security PLS in the presence of a...