Google Android elevation of privilege vulnerability (CNVD-2025-01825)

Google Android is a Linux-based open source operating system developed by Google Inc. in the United States. Google Android suffers from a security vulnerability, no details of the vulnerability are provided at this time...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A security vulnerability exists in DataEase versions prior to 2.10.4, which ste...

Gramine 安全漏洞

Gramine is an open source Linux multiprocess application library operating system supporting Intel SGX by The Gramine Project. A security vulnerability exists in Gramine, which stems from a mismatch between SW signals and HW anomalies, resulting in an interface vulnerability...

[SECURITY] Fedora 40 Update: firefox-134.0-1.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Allow All File Extensions for file fields, which stems from the presence of an issue...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Code-Projects Online Bike Rental System 代码问题漏洞

Code-Projects Online Bike Rental System is an open source online bike rental system from Code-Projects. A code issue vulnerability exists in Code-Projects Online Bike Rental System version 1.0, which stems from the presence of an unrestricted upload...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Diff prior to version 1.8.0, which stems from the inclusion of an authorization error vulnerability...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Registration role prior to version 2.0.1, which stems from the inclusion of a privilege assignment error vulnerability...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Block permissions versions 1.0.0 through 1.2.0, which stems from the inclusion of an authorization error vulnerability...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Code-Projects Online Bike Rental System 代码注入漏洞

Code-Projects Online Bike Rental System is a Code-Projects open source online bike rental system. Code-Projects Online Bike Rental System version 1.0 suffers from a code injection vulnerability that stems from susceptibility to cross-site scripting attacks...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal that stems from the existence of a problem...

REDCap 安全漏洞

REDCap is a data collection and management web application from REDCap Open Source. A security vulnerability exists in REDCap version 14.9.6. An attacker can exploit the vulnerability to execute arbitrary web scripts...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Use-after-free when breaking lines in text CVE-2025-0238 firefox: Memory corruption when using JavaScript Text Segmentation CVE-2025-0241 firefox: Alt-Svc ALPN...

Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 41 Update: firefox-134.0-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Soft Serve 路径遍历漏洞

Soft Serve is a self-hostable command-line Git server from Charm Open Source. A path traversal vulnerability exists in Soft Serve versions prior to 0.8.2, which stems from vulnerability to a path traversal attack that allows an existing non-administrative user to access and take over another user...

CVE-2025-21623

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service...