Linux Distros Unpatched Vulnerability : CVE-2019-8426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControlMinTiltRange parameter...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-8991

A vulnerability was identified in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file /admin/config/express of the component Business Logic Handler. The manipulation of the argument litemallexpressfreightmin leads to business logic errors. The...

CVE-2025-8991 linlinjava litemall Business Logic express logic error

A vulnerability was identified in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file /admin/config/express of the component Business Logic Handler. The manipulation of the argument litemallexpressfreightmin leads to business logic errors. The...

litemall 安全漏洞

litemall is a small mall system for linlinjava individual developers. A security vulnerability exists in linlinjava litemall version 1.8.0 and earlier, which stems from a business logic error due to incorrect operation of the parameter litemallexpressfreightmin in the file /admin/config/express...

PT-2025-33423 · Linlinjava · Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0 Description: A vulnerability was identified in linlinjava litemall. The issue affects an unknown functionality within the /admin/config/express file of the Business Logic Handler component. Manipulatio...

Malicious code in publish-test-min-module (npm)

The package publish-test-min-module was found to contain malicious code...

Malicious code in @zalastax/nolb-min_ (npm)

The package @zalastax/nolb-min was found to contain malicious code...

Malicious code in @zalastax/nolb-min- (npm)

The package @zalastax/nolb-min- was found to contain malicious code...

MAL-2025-12351 Malicious code in @zalastax/nolb-min- (npm)

The package @zalastax/nolb-min- was found to contain malicious code...

MAL-2025-12356 Malicious code in @zalastax/nolb-min_ (npm)

The package @zalastax/nolb-min was found to contain malicious code...

MAL-2025-30823 Malicious code in publish-test-min-module (npm)

The package publish-test-min-module was found to contain malicious code...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-49057

CVE-2025-49057: Reflected XSS in WordPress plugin WP Voting (versions n/a through 1.8). The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting. Affected software: WP Voting

BIT-LIBPHP-2021-21708 UAF due to php_filter_float() failing

In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in...

PT-2025-40636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow issue exists in the stripe io hints function when handling excessively large chunk sizes. This could lead to incorrect setting of io min and io opt limits...

Enhancing Privacy in Decentralized Min-Max Optimization: a Differentially Private Approach

Decentralized min-max optimization allows multi-agent systems to collaboratively solve global min-max optimization problems by facilitating the exchange of model updates among neighboring agents, eliminating the need for a central server. However, sharing model updates in such systems carry a ris...

Linux Distros Unpatched Vulnerability : CVE-2025-38415

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squashfs: check return result of sbminblocksize Syzkaller reports an UBSAN: shift-out-of-bounds in squashfsbioread bug. Syzkaller forks multiple processes whic...

Exploit for SQL Injection in Piwigo

CVE-2024-43018 - x Assign an ID - Be officially populate...

CVE-2024-43018

Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters maxlevel and minregister. These parameters are used in wsusergerList function from file include\wsfunctions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in...