21378 matches found
Google Android security vulnerabilities
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by an unauthorized way of adding contacts due to a logic error in the onCreate function in SelectAccountActivity.java. An attacker can...
Governance-Driven Automation: How Flowable Is Redefining Digital Process Management
A newly published independent research report highlights Flowable’s rise in the digital process automation market. Built on open-source…...
Envoy code-related vulnerabilities
Envoy is an Enphase open source gateway program for connecting smart home devices. A code issue vulnerability exists in Envoy, which stems from the OAuth2 filter omitting the Secure attribute when deleting session cookies with the Secure-/Host- prefix, resulting in the browser rejecting the delet...
Raspberry Pi Pico As a Radio Transmitter
In this paper we discuss several surprisingly simple methods for transforming the Raspberry Pi Pico RP2 microcontroller into a radio transmitter, by using only cheap off the shelf electronic components, and open source software. While initially this transformation may look as a harmless curiosity...
FreeScout security vulnerabilities
FreeScout is an open source helpdesk system built on the PHP Laravel framework, designed to provide users with functionality similar to Zendesk or Help Scout, but without sacrificing privacy or freedom. Freescout suffers from a deserialization vulnerability that stems from the application's unsaf...
Mautic security vulnerabilities
Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from an administrator being able to change the mautic application...
Mautic security vulnerabilities
Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from a login return time discrepancy that could lead to username enumeratio...
Mautic security vulnerabilities
Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from user-supplied input being reflected back as a response in the server...
Linux Distros Unpatched Vulnerability : CVE-2021-21255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI versi...
PT-2025-35657
Name of the Vulnerable Software and Affected Versions Dive versions 0.9.0 through 0.9.3 Description Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Versions 0.9.0 through 0.9.3 contain a Remote Code Execution RCE vulnerability triggered by ...
Malicious code in newrelic-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Tirreno security vulnerabilities
tirreno is a security analyzer from tirreno open source. A security vulnerability exists in Tirreno version v0.9.5, which stems from improper handling of the columns0data parameter and could lead to an SQL injection attack...
Rancher security vulnerabilities
Rancher is an open source container management platform from Rancher Open Source in the United States, built for organizations that deploy containers in production environments. A security vulnerability exists in Rancher that stems from an unrestricted request body size that could lead to a denia...
MAL-2025-46955 Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...
MAL-2025-46932 Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e907c6e8d9b369e32e165c27d2a66931e8ecbb4b256a932542731234e6cf8da The OpenSSF Package Analysis project identified 'monolith-twirp-merge-queue-go-mergequeueservice' @ 1.0.2 rubygems as malicious. It is considere...
[SECURITY] Fedora 42 Update: chromium-139.0.7258.154-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
Saad Irfan RemoteClinic security vulnerability
Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from an incorrect manipulation of the parameter image in the fil...
Sim Studio path traversal vulnerability
Sim Studio is an AI agent workflow builder from the Sim Studio open source. A path traversal vulnerability exists in Sim Studio that stems from an incorrect manipulation of the parameter filePath leading to a path traversal attack...
MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...
