19788 matches found
CSZ-CMS 安全漏洞
CSZ-CMS is a PHP-based open source content management system CMS from CSZ-CMS Open Source. A security vulnerability exists in CSZ-CMS 1.3.0 and prior versions, which stems from an unvalidated field parameter in the form view function, which could lead to an SQL injection attack...
CVE-2025-30189
creationtimestamp| type| source ---|---|--- 2025-10-29 16:47:27+00:00| seen| https://seclists.org/oss-sec/2025/q4/97 2025-10-30 01:33:06+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115460537325572111 2025-10-30 02:07:01+00:00| seen|...
aenvironment (=0.1.7rc1), agentfetch-mcp (>=1.0.0 <=1.0.1) +210 more potentially affected by unknown CVE via fastmcp (>=0.1.0 <=2.12.5)
fastmcp PYPI version =0.1.0, =1.0.0, =0.4.6, =1.8.0, =3.2.0, =3.2.0, =4.2.2, =3.0.2, =0.2.7, =1.0.0rc1, =0.2.7, =1.7.3, =0.1.12, =0.9.30, =0.9.77 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C2JP-C369-7PVX...
Jenkins Start Windocks Containers Plugin 安全漏洞
Jenkins Start Windocks Containers Plugin is an open source plugin for Jenkins to link WinDocks hosts. A security vulnerability exists in Jenkins Start Windocks Containers Plugin 1.4 and earlier versions that stems from vulnerability to cross-site request forgery attacks...
appsec-sentinel
AppSec-Sentinel AI-powered security scanner with cross-file...
Taiga SQL注入漏洞
Taiga is a free open source project management tool from Taiga Open Source. An SQL injection vulnerability exists in Taiga 6.8.3 and earlier versions, which stems from the presence of blind time-based SQL injection in the API, which could lead to sensitive data disclosure...
Adobe Commerce/Magento Open Source Multiple Vulnerabilities (APSB25-94)
The version of Adobe Commerce/Magento Open Source installed on the remote host it is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-94 advisory. - Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an...
EUVD-2025-36380
eLabFTW is an open source electronic lab notebook for research labs. The application served uploaded SVG files inline. Because SVG supports active content, an attacker could upload a crafted SVG that executes script when viewed, resulting in stored XSS under the application origin. A victim who...
CVE-2025-12204
creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79...
CVE-2025-12205
creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79...
CVE-2025-12207
creationtimestamp| type| source ---|---|--- 2025-10-27 19:03:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/79 2025-11-04 17:03:45+00:00| seen| https://seclists.org/oss-sec/2025/q4/132...
CVE-2025-61795
creationtimestamp| type| source ---|---|--- 2025-10-27 18:13:45+00:00| seen| https://seclists.org/oss-sec/2025/q4/77 2025-10-27 19:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4747uh2g32p 2025-10-27 19:33:15+00:00| seen|...
robloxinjector
robloxi...
[SECURITY] Fedora 42 Update: chromium-141.0.7390.122-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
PT-2025-44056
Name of the Vulnerable Software and Affected Versions eLabFTW versions prior to 5.3.0 Description eLabFTW, an electronic lab notebook, allowed the serving of uploaded SVG files inline. Due to SVG’s support for active content, a malicious SVG file could be uploaded and executed when viewed, leadin...
LearnHouse 安全漏洞
LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has a security vulnerability that stems from an insufficient restriction of the parameter thumbnail in the component Course Thumbnail Handler in files/api/v1/courses/, which could lead to arbitrary file...
CVE-2025-12198
Last updated 29 October 2025 Notes mdeslaur This issue requires replacing the root-owned configuration file. See https://www.openwall.com/lists/oss-security/2025/10/27/1 This CVE is likely to be rejected. Marking as deferred for now...
MAL-2025-48605 Malicious code in near-abi-client-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...