O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA version 10.0-410 and earlier, which originates from cross-site scripting due to incorrect manipulation of parameters in the file /xportalassembledesigner/jaxrs/widget...

CVE-2025-57767

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header wi...

CVE-2025-54995

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

MAL-2025-41612 Malicious code in verizon-media-open-source-project-portal (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in verizon-media-open-source-project-portal (npm)

--- -= Per source details. Do not edit below this line.=-...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20255)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20245)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20251)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from the proId parameter not being cleare...

Valtimo 安全漏洞

Valtimo is a low-code platform for business process automation open-sourced by Valtimo in the Netherlands. A security vulnerability exists in Valtimo versions prior to 12.16.0.RELEASE and 13.1.2.RELEASE, which stems from the possibility that an administrator may access sensitive data or resources...

PT-2025-35098

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 20.15.2 Asterisk versions prior to 21.10.2 Asterisk versions prior to 22.5.2 Description: Asterisk is an open source private branch exchange and telephony toolkit. If a Session Initiation Protocol SIP request is...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20248)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

libbiosig Heap Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a heap buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

QuickCMS 跨站请求伪造漏洞

QuickCMS is an open source content management system from QuickCMS. A cross-site request forgery vulnerability exists in QuickCMS version 6.8, which stems from vulnerability to cross-site request forgery attacks...

libbiosig stack buffer overflow vulnerability (CNVD-2025-20249)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

Malicious code in @nx/js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

Linux Distros Unpatched Vulnerability : CVE-2019-16058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the pamp11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this trigge...

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

A team of academics has devised a novel attack that can be used to downgrade a 5G connection to a lower generation without relying on a rogue base station gNB. The attack, per the ASSET Automated Systems SEcuriTy Research Group at the Singapore University of Technology and Design SUTD, relies on ...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the addImage or html methods. An attacker can cause excessive CPU utilization and application unresponsiveness by supplying malicious PNG image data or URLs. Details Denial of...

OSV-2025-688 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=440841513 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...