Sim Studio 路径遍历漏洞

Sim Studio is an AI agent workflow builder from the Sim Studio open source. A path traversal vulnerability exists in Sim Studio that stems from an incorrect manipulation of the parameter filePath leading to a path traversal attack...

Saad Irfan RemoteClinic 安全漏洞

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from an incorrect manipulation of the parameter image in the fil...

MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2006-3227

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:30+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Integrated Simulation Framework for Adversarial Attacks on Autonomous Vehicles

Autonomous vehicles AVs rely on complex perception and communication systems, making them vulnerable to adversarial attacks that can compromise safety. While simulation offers a scalable and safe environment for robustness testing, existing frameworks typically lack comprehensive supportfor...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter nmtipo in the file /intranet/educartipoensinocad.php...

Learning Management System 安全漏洞

Learning Management System is itsourcecode open source a learning management system. A security vulnerability exists in Learning Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter Username in the file /admin/login.php...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to incorrect manipulation of the parameters name/alias/description in the file...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /module/AreaConhecimento/view...

Linux Distros Unpatched Vulnerability : CVE-2021-21441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Atta...

Malicious code in @callcenter-frontend/services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...

OESA-2025-2088 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication...

[SECURITY] Fedora 41 Update: chromium-139.0.7258.138-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2025-35297

Name of the Vulnerable Software and Affected Versions Harness Open Source versions prior to 3.3.0 Description Harness Open Source’s git Large File Storage LFS server Gitness exposes APIs for retrieving and uploading files via git LFS. The implementation of the upload git LFS file API is susceptib...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from cross-site scripting due to the incorrect operation of the parameter Description in the file...

Centurion ERP 授权问题漏洞

Centurion ERP is an open source management system from No Fuss Computing. An authorization issue vulnerability exists in Centurion ERP versions prior to 1.12.0 through 1.21.0, which stems from an improperly viewed authentication token that could lead to information disclosure...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from a SQL injection attack due to a mishandling of the parameter ID in the file /module/FormulaMedia/view...

An Empirical Study of Vulnerable Package Dependencies in LLM Repositories

Large language models LLMs have developed rapidly in recent years, revolutionizing various fields. Despite their widespread success, LLMs heavily rely on external code dependencies from package management systems, creating a complex and interconnected LLM dependency supply chain. Vulnerabilities ...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to the incorrect operation of the parameter name/alias/description in the file...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from cross-site scripting due to incorrect operation of the parameter toMonthViewName in the file...