CVE-2025-12207

creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79 2025-11-04 17:03:45+00:00| seen| https://seclists.org/oss-sec/2025/q4/132...

CVE-2025-61795

creationtimestamp| type| source ---|---|--- 2025-10-27 18:13:45+00:00| seen| https://seclists.org/oss-sec/2025/q4/77 2025-10-27 19:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4747uh2g32p 2025-10-27 19:33:15+00:00| seen|...

robloxinjector

robloxi...

[SECURITY] Fedora 42 Update: chromium-141.0.7390.122-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2025-44056

Name of the Vulnerable Software and Affected Versions eLabFTW versions prior to 5.3.0 Description eLabFTW, an electronic lab notebook, allowed the serving of uploaded SVG files inline. Due to SVG’s support for active content, a malicious SVG file could be uploaded and executed when viewed, leadin...

LearnHouse 安全漏洞

LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has a security vulnerability that stems from an insufficient restriction of the parameter thumbnail in the component Course Thumbnail Handler in files/api/v1/courses/, which could lead to arbitrary file...

CVE-2025-12198

Last updated 29 October 2025 Notes mdeslaur This issue requires replacing the root-owned configuration file. See https://www.openwall.com/lists/oss-security/2025/10/27/1 This CVE is likely to be rejected. Marking as deferred for now...

MAL-2025-48605 Malicious code in near-abi-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 43 Update: chromium-141.0.7390.122-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: chromium-141.0.7390.107-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 43 Update: moodle-5.0.3-1.fc43

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 41 Update: moodle-4.4.11-1.fc41

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

[SECURITY] Fedora 42 Update: moodle-4.5.7-1.fc42

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from installTheme function has a file upload vulnerability...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from the unInstallTheme function has an arbitrary file deletion vulnerability...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from installPlugin function has a file upload vulnerability...

WordPress bbp-move-topics plugin cross-site scripting vulnerability

WordPress bbp-move-topics plugin is an open source forum plugin for WordPress , developed by Automattic , supports users to manage forums through the WordPress backend . WordPress bbp-move-topics plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of...

Wazuh 4.14.0

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

Lightweight and Breach-Resilient Authenticated Encryption Framework for Internet of Things

The Internet of Things IoT relies heavily on resource-limited devices to communicate critical e.g., military data information under low-energy adversarial environments and low-latency wireless channels. Authenticated Encryption AE guarantees confidentiality, authenticity, and integrity, making it...

Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses

Multimodal large language models MLLMs comprise of both visual and textual modalities to process vision language tasks. However, MLLMs are vulnerable to security-related issues, such as jailbreak attacks that alter the model's input to induce unauthorized or harmful responses. The incorporation o...