7424 matches found
React Native Community CLI 安全漏洞
React Native Community CLI is an open source command line tool for React Native Community. A security vulnerability exists in the React Native Community CLI, which stems from a default binding to an external interface and an OS command injection vulnerability in the endpoint, which could allow an...
CVE-2025-11953: Improper Neutralization of Special Elements used in an OS Command
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
WordPress plugin Kleo 安全漏洞
WordPress Kleo plugin is a feature-rich portfolio of themes and plugins in the WordPress ecosystem, primarily used to build social networks, member communities and e-commerce platforms. WordPress Kleo plugin suffers from a file inclusion vulnerability that stems from improper file name control,...
WordPress plugin Masterstudy 安全漏洞
WordPress Masterstudy plugin is a free learning management system plugin designed for WordPress. The WordPress Masterstudy plugin suffers from a file inclusion vulnerability that stems from improper control over the filename of include or request statements, which can be exploited by an attacker ...
Malicious code in epic-native-client-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50379c5aba661d07876a66cc65e88471f28e19562f8de1e384cb65a77d3abd20 The package epic-native-client-utils was found to contain malicious code...
EUVD-2025-37128
Malicious code in epic-native-client-utils npm...
MAL-2025-49165 Malicious code in epic-native-client-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50379c5aba661d07876a66cc65e88471f28e19562f8de1e384cb65a77d3abd20 The package epic-native-client-utils was found to contain malicious code...
[SECURITY] Fedora 42 Update: qt6-qtwebview-6.9.3-1.fc42
Qt WebView provides a way to display web content in a QML application without necessarily including a full web browser stack by using native APIs where it makes sense...
AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI
This paper introduces the Agentic AI Governance Assurance & Trust Engine AAGATE, a Kubernetes-native control plane designed to address the unique security and governance challenges posed by autonomous, language-model-driven agents in production. Recognizing the limitations of traditional...
CVE-2025-61385
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
pg8000 SQL injection vulnerability via a specially crafted Python list input
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
EUVD-2025-36226
pg8000 SQL injection vulnerability via a specially crafted Python list input...
GHSA-WQ2G-R956-J8CC pg8000 SQL injection vulnerability via a specially crafted Python list input
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
CVE-2025-61385
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
PT-2025-44000
Name of the Vulnerable Software and Affected Versions pg8000 version 1.31.4 Description A SQL injection flaw exists in pg8000. This issue allows remote attackers to execute arbitrary SQL commands by providing a specially crafted Python list as input to the pg8000.native.literal function. The...
CVE-2025-61385
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
CVE-2025-61385
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...
CVE-2025-61385
A SQL injection vulnerability exists in the tlocke pg8000 library (version 1.31.4). Remote attackers can execute arbitrary SQL commands by providing a specially crafted Python list input to the pg8000.native.literal function. This vulnerability is associated with CWE-89 . Affected products includ...
Linux Distros Unpatched Vulnerability : CVE-2025-11719
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caused by use-after-free memory corruption...