CVE-2024-10110 Denial of Service in aimhubio/aim

In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests...

CVE-2024-10110 Denial of Service in aimhubio/aim

In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests...

CVE-2024-10110

The CVE-2024-10110 issue affects aimhubio/aim (version 3.23.0) where the ScheduledStatusReporter can be instantiated to run on the tracking server’s main thread, blocking it and causing DoS by making the server unresponsive to other requests. Multiple connected sources corroborate the description...

CVE-2024-10110: Uncontrolled Resource Consumption

In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests...

PT-2025-12026

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.23.0 Description The ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the...

WordPress plugin InstaWP Connect 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-11076

Name of the Vulnerable Software and Affected Versions: hyp affected versions not specified Description: A logic error in multiple functions within hyp-main.c may allow for privilege escalation, potentially leading to local information disclosure without requiring additional execution privileges o...

MAL-2025-2161 Malicious code in adyen-web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cd36b7d736b57d0d4d4a6489ac6362b0ac4e74f3431e76302256745de7e745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adyen-web-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cd36b7d736b57d0d4d4a6489ac6362b0ac4e74f3431e76302256745de7e745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitget-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06e640734ec5e28eb4cd980ba22401e01aafb30604056e6ce588cd9df053229b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2134 Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2096 Malicious code in bitget-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06e640734ec5e28eb4cd980ba22401e01aafb30604056e6ce588cd9df053229b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latoken-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 114715a83c1f9537c15f2feab2c357a4cece3c946d5295dd133ee53efb347fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whitebit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 847bddd37490fd2ab6f55b03e72b5a71f355721caadcddb82310262d39916056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2145 Malicious code in whitebit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 847bddd37490fd2ab6f55b03e72b5a71f355721caadcddb82310262d39916056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1958: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...

CVE-2025-1832: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched...

CVE-2025-1820: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to sql injection. The attack ca...

CVE-2025-1716 picklescan - Security scanning bypass via 'pip main'

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package hosted, for example, on pypi.org or GitHub via pip.main. Because pip is not a restricted global, the model, when scanned with picklesca...