EUVD-2021-19545

Malware in sbrugna...

EUVD-2012-5702

Malware in sbrugna...

EUVD-2021-16096

Malware in sbrugna...

EUVD-2021-0315

Malware in sbrugna...

EUVD-2021-2222

Malware in sbrugna...

EUVD-2021-0292

Malware in sbrugna...

EUVD-2021-0649

Malware in sbrugna...

EUVD-2017-18293

Malware in sbrugna...

EUVD-2021-19519

Malware in sbrugna...

[SECURITY] Fedora 43 Update: chromium-141.0.7390.54-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

An Empirical Study of Security-Policy Related Issues in Open Source Projects

GitHub recommends that projects adopt a SECURITY.md file that outlines vulnerability reporting procedures. However, the effectiveness and operational challenges of such files are not yet fully understood. This study aims to clarify the challenges that SECURITY.md files face in the vulnerability...

ROS-20251007-03

The vulnerability of the high-performance open source DNS server PowerDNS Recursor is related to a a bug in the ECS implementation. Exploitation of the vulnerability could allow an attacker acting remotely, perform cache poisoning attacks...

Vibe Coding Is the New Open Source—in the Worst Way Possible

As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way...

Flowise 安全漏洞

Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from an unfiltered IFRAME element and could lead to a cross-site scripting attack...

[SECURITY] Fedora 43 Update: firefox-143.0.3-1.fc43

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CRMEB 安全漏洞

CRMEB is a Java mall system of CRMEB open source. A security vulnerability exists in CRMEB 5.6 and earlier versions, which stems from an incorrect manipulation of the parameter cateid in the file /adminapi/product/product, which could lead to a SQL injection attack...

Security Analysis of Ponzi Schemes in Ethereum Smart Contracts

The rapid advancement of blockchain technology has precipitated the widespread adoption of Ethereum and smart contracts across a variety of sectors. However, this has also given rise to numerous fraudulent activities, with many speculators embedding Ponzi schemes within smart contracts, resulting...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

ZKEACMS 授权问题漏洞

ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...

AI Verger 代码问题漏洞

AI Verger is an AI chat tool open-sourced by Le Chatterie. A code issue vulnerability exists in AI Verger version 1.2.10 and earlier, which stems from incorrect manipulation of the parameter URLs in the file /src/main/services/mcp/oauth/provider.ts, which could lead to a deserialization attack...