CVE-2025-7611: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wedding Reservation 1.0. It has been classified as critical. This affects an unknown part of the file /global.php. The manipulation of the argument lu leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2014-125091

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely...

PT-2025-39403

Name of the Vulnerable Software and Affected Versions pytorch version 2.8.0 Description An issue in the torch.linalg.lu component allows attackers to cause a Denial of Service DoS when performing a slice operation. Recommendations At the moment, there is no information about a newer version that...

CVE-2022-25962

creationtimestamp| type| source ---|---|--- 2025-04-01 14:33:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9913...

CVE-2024-43086

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-11-13 19:44:37+00:00| seen| https://t.me/cvedetector/10854...

CVE-2024-46732

creationtimestamp| type| source ---|---|--- 2024-09-18 10:01:19+00:00| seen| https://t.me/cvedetector/5907 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

MAL-2024-1592 Malicious code in ing-feat-lu-luxtrust-token-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d7c8b06f4e363cde4609c5bb2971268a310ec0ec691464f7c1159191f308b8c The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-token-authentication' @ 200.0.1 npm as malicious. It is considered malicio...

MAL-2024-1591 Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e84b6fcb318d2b4cf4fc650d67ffb94a0622eb47d6b88e8662bdb6b2dc62930 The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-stick-authentication' @ 200.0.1 npm as malicious. It is considered malicio...

CVE-2024-26614

creationtimestamp| type| source ---|---|--- 2024-03-11 19:27:28+00:00| seen| https://t.me/ctinow/204982 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

[SECURITY] Fedora 40 Update: vecmath1.2-1.14-36.fc40

This is an unofficial implementation java source code of the javax.vecmath package specified in the JavaTM 3D API 1.2 . The package includes classes for 3-space vector/point, 4-space vector, 4x4, 3x3 matrix, quaternion, axis-angle combination and etc. which are often utilized for computer graphic...

CVE-2024-26586

creationtimestamp| type| source ---|---|--- 2024-02-22 18:53:39+00:00| seen| https://t.me/ctinow/191009 2024-02-23 15:11:29+00:00| seen| https://t.me/ctinow/191795 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

espace2001.lu Improper Access Control vulnerability OBB-3845285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cs7.lu Improper Access Control vulnerability OBB-3845236

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52307

Stack overflow in paddle.linalg.luunpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage...

PT-2024-14514 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in paddle.linalg.lu unpack that can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to 2.6.0, update to...

MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-6003-1 emacs24 vulnerability

Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this issue to execute arbitrary commands...

Wordpress Plugin cp-polls SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

CVE-2014-125091: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely...

Malicious Package

Overview ing-orange-lu-luxtrust is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...