CVE-2025-10967

The CVE-2025-10967 entry relates to MuFen-mker PHP-Usermm (versions up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9). A SQL injection vulnerability exists in file /chkuser.php caused by manipulating the Username parameter. The attack can be remote and exploit is public. Public details about affect...

CVE-2025-10962

The CVE-2025-10962 affects Wavlink NU516U1 M16U1_V240425. The flaw occurs in the SetName Page, function sub_403198, where manipulation of the mac_5g argument in /cgi-bin/wireless.cgi enables remote command injection. Public exploit is available, and the vendor was contacted without response. CVSS...

CVE-2025-46152

No description is available for this CVE. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability...

CVE-2025-10953

A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability affects unknown code of the file /goform/formApMail. The manipulation of the argument senderEmail leads to buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-10943

A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...

MAL-2025-47571 Malicious code in x402_monorepo (npm)

The package x402monorepo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289e2c6110a91f2ee16f7a0beed85851e59612748773355b6bb90a5b7073ad16 Any computer that has this package installed or running should be considered fully...

Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

WordPress Plugin CP Multi View Event Calendar Authorization Missing Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An authorization missing vulnerability exists in the WordPress plugin CP Multi View Event...

Do Not Install Python 2

The EOL for Python 2 was reached on January 1, 2020, and there will be no updates and maintenance. If you continue to use Python 2, the system attack surface may be expanded, and system vulnerabilities and attack risks may increase. Therefore, do not use Python 2. If Python is required, you are...

Swagger Petstore Sample 安全漏洞

Swagger Petstore Sample is a sample petstore system in the Swagger open source. A security vulnerability exists in Swagger Petstore Sample version 1.0.7, which stems from a server returning a 404 error page and exposing sensitive information when accessing a non-existent endpoint or shopping cart...

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

CVE-2025-29157

CVE-2025-29157 concerns the Swagger Petstore sample (version 1.0.7). The issue occurs when an attacker accesses a non-existent endpoint like /cart, causing the server to return a 404 error page that reveals sensitive information, including the servlet name (default) and server version. The descri...

CVE-2025-59343

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves...

BELL-CVE-2025-39867 CVE-2025-39867 does not affect BellSoft software

Bulletin has no description...

Horilla 跨站脚本漏洞

Horilla is a free and open source human resources software from Horilla, Inc. A cross-site scripting vulnerability exists in Horilla version 1.3.0, which stems from multiple fields in the Project and Task modules not being properly cleared for user input, and could lead to a stored cross-site...

Malicious Package

Overview vite-plugin-parse-json is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

BIT-MONGODB-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31, MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to...

SUSE-SU-2025:20732-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

This update for kernel-livepatch-MICRO-6-0-RTUpdate10 fixes the following issues: - CVE-2025-38498: dochangetype: refuse to operate on unmounted/not ours mounts bsc1247499 - CVE-2025-38555: usb: gadget : fix use-after-free in compositedevcleanup bsc1248298...

kernel: do_change_type(): refuse to operate on unmounted/not ours mounts

In the Linux kernel, the following vulnerability has been resolved: dochangetype: refuse to operate on unmounted/not ours mounts Ensure that propagation settings can only be changed for mounts located in the caller's mount namespace. This change aligns permission checking with the rest of mount2...

Do Not Enable Insecure SNMP Versions

Simple Network Management Protocol SNMP is a standard protocol designed to manage network nodes in IP networks. This protocol allows the exchange of network management and control data between network elements NEs. If SNMP is installed in scenarios where SNMP is not required, additional system...