19782 matches found
VulnCheck KEV: CVE-2022-4984
ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...
tea_gunfinal (>=1.1.2 <=1.1.5) potentially affected by unknown CVE via tea_gunfinal (=1.1.6)
teagunfinal NPM version =1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teagunfinal and may be impacted: - teagunfinal =1.1.2, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181568...
@akunsansan0/tea_gunt99 (=1.1.4) potentially affected by unknown CVE via tea_gunt99 (=1.1.2)
teagunt99 NPM version =1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on teagunt99 and may be impacted: - @akunsansan0/teagunt99 =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181569...
CVE-2025-57812
CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Filters versions up to and including 1.28.17...
EUVD-2025-144229
Malicious code in verts-otimo-nag npm...
@doelsumbing87/teadoelsumbing87 (=1.0.0) potentially affected by unknown CVE via teadoelsumbing87 (=1.0.0)
teadoelsumbing87 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on teadoelsumbing87 and may be impacted: - @doelsumbing87/teadoelsumbing87 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171954...
siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala3 (=1.0.0)
nokire-nakala3 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...
siddheshtea (=1.1.6) potentially affected by unknown CVE via nuilava-darae-naha (=1.0.0)
nuilava-darae-naha NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-darae-naha and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163876...
siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-23 (=1.0.0)
muklis-23 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...
How Can We Effectively Use LLMs for Phishing Detection?: Evaluating the Effectiveness of Large Language Model-Based Phishing Detection Models
Large language models LLMs have emerged as a promising phishing detection mechanism, addressing the limitations of traditional deep learning-based detectors, including poor generalization to previously unseen websites and a lack of interpretability. However, LLMs' effectiveness for phishing...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not truncating the first page in the wrong path, which could lead to a kernel bug...
pH7 Social Dating Builder 安全漏洞
pH7 Social Dating Builder is an open source social dating system from pH7 Social Dating CMS pH7CMS. A security vulnerability exists in pH7 Social Dating Builder version 17.9.1, which stems from the messaging system not cleaning up user submissions and could lead to a stored cross-site scripting...
Pack-A-Mal: A Malware Analysis Framework for Open-Source Packages
The increasingly sophisticated environment in which attackers operate makes software security an even greater challenge in open-source projects, where malicious packages are prevalent. Static analysis tools, such as Malcontent, are highly useful but are often incapable of dealing with obfuscated...
GHSA-MGRM-G92Q-F8H8
creationtimestamp| type| source ---|---|--- 2025-11-11 17:50:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/164...
MAL-2025-138579 Malicious code in warnermedia-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 235c7d43006e41c31c3b06069239c483934cee515a1f489c55e698fdf994909e The OpenSSF Package Analysis project identified 'warnermedia-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
EUVD-2025-90449
Malicious code in lina-bubur41-miaww npm...
EUVD-2025-89137
Malicious code in riana-taiwan29-miaww npm...
able_catfish_z3n (=3.2.4), absolute_eagle_z3n (=3.4.1) +391 more potentially affected by unknown CVE via rudiscammer (>=0.1.0 <=4.2.5)
rudiscammer NPM version =0.1.0, =4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on rudiscammer and may be impacted: - ablecatfishz3n =3.2.4 - absoluteeaglez3n =3.4.1 - abundantparrotz3n =4.2.3 - academiclimpetz3n =3.2.4 - acceptableemuz3n =3.1.4 -...
12boowjljk-notthedevs (=1.6.9), ahahscroot (=1.0.1) +14 more potentially affected by unknown CVE via 666-tea (=1.1.4)
666-tea NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs =1.6.9 - ahahscroot =1.0.1 - bacoritul =1.0.1 - basuki =1.0.0 - df6fqftol9-notthedevs =1.6.9 - forilcuy =1.0.1 - gasmbut...