19782 matches found
CVE-2025-52565
creationtimestamp| type| source ---|---|--- 2025-11-05 08:57:06+00:00| seen| https://seclists.org/oss-sec/2025/q4/138 2025-11-05 10:35:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4uu364gd32h 2025-11-05 14:59:52+00:00| seen|...
Cursor 访问控制错误漏洞
Cursor is an AI code editor from Cursor open source. An access control error vulnerability exists in Cursor version 1.7.23 and earlier, which stems from a logic error that could cause a malicious agent to read protected sensitive files...
Open Source Social Network 安全漏洞
Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network OSSN version 8.6, which stems from an incorrect manipulation of the parameter timestamp in the file /action/rtcomments/status, which could lead...
EUVD-2025-37922
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...
CVE-2025-63585
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...
PT-2025-45163
Name of the Vulnerable Software and Affected Versions OSSN Open Source Social Network version 8.6 Description OSSN Open Source Social Network version 8.6 has a SQL Injection issue in the /action/rtcomments/status API endpoint through the timestamp parameter. Recommendations At the moment, there i...
CVE-2025-63585
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...
DWSurvey 安全漏洞
DWSurvey is a DWSurvey open source questionnaire system written in Java. A security vulnerability exists in DWSurvey version 6.14.0, which stems from improper access control and could lead to the deletion of additional questionnaires...
CVE-2025-63585
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...
CVE-2025-63585
OSSN 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter. The vulnerability is a SQLi in the timestamp field that can lead to data disclosure/modification under certain DB permissions, with evidence of a time-based blind exploit demonstrated in public GitHu...
Cursor 代码注入漏洞
Cursor is an AI code editor from the Cursor open source. A code injection vulnerability exists in Cursor 1.7.44 and earlier versions, which stems from an NTFS path feature that allows bypassing sensitive file protections and could lead to remote code execution...
Galette 安全漏洞
Galette is a Galette open source membership management web application for non-profit organizations. A security vulnerability exists in Galette 1.1.5.2 and earlier versions, which stems from Document Type being vulnerable to cross-site scripting attacks...
Codeshare 安全漏洞
Codeshare is an open source code contribution tool from Codeshare. A security vulnerability exists in Codeshare version v1.0.0 that stems from a risk of information disclosure...
EUVD-2025-37507
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
CVE-2025-63441
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
Open Source Social Network 安全漏洞
Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A security vulnerability exists in Open Source Social Network OSSN version 8.6, which stems from an incorrect manipulation of the parameter param in the endpoint u/administrator/friends, which could lead t...
CVE-2025-63441
Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...
PT-2025-44784
Name of the Vulnerable Software and Affected Versions Open Source Social Network OSSN version 8.6 Description Open Source Social Network OSSN version 8.6 is susceptible to a Cross Site Scripting XSS issue. The issue occurs through the param parameter at the /u/administrator/friends API endpoint...
CVE-2025-63441
CVE-2025-63441 affects Open Source Social Network (OSSN) 8.6. The connected documents identify a Cross-Site Scripting (XSS) vulnerability exploitable via the parameter named param at the endpoint /u/administrator/friends. The CVSS v3.1 vector indicates Network attack, Low attack complexity, Low p...