19815 matches found
[SECURITY] Fedora 43 Update: chromium-141.0.7390.54-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
An Empirical Study of Security-Policy Related Issues in Open Source Projects
GitHub recommends that projects adopt a SECURITY.md file that outlines vulnerability reporting procedures. However, the effectiveness and operational challenges of such files are not yet fully understood. This study aims to clarify the challenges that SECURITY.md files face in the vulnerability...
ROS-20251007-03
The vulnerability of the high-performance open source DNS server PowerDNS Recursor is related to a a bug in the ECS implementation. Exploitation of the vulnerability could allow an attacker acting remotely, perform cache poisoning attacks...
Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way...
Flowise 安全漏洞
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from an unfiltered IFRAME element and could lead to a cross-site scripting attack...
[SECURITY] Fedora 43 Update: firefox-143.0.3-1.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CRMEB 安全漏洞
CRMEB is a Java mall system of CRMEB open source. A security vulnerability exists in CRMEB 5.6 and earlier versions, which stems from an incorrect manipulation of the parameter cateid in the file /adminapi/product/product, which could lead to a SQL injection attack...
Security Analysis of Ponzi Schemes in Ethereum Smart Contracts
The rapid advancement of blockchain technology has precipitated the widespread adoption of Ethereum and smart contracts across a variety of sectors. However, this has also given rise to numerous fraudulent activities, with many speculators embedding Ponzi schemes within smart contracts, resulting...
编号撤回
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
ZKEACMS 授权问题漏洞
ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...
AI Verger 代码问题漏洞
AI Verger is an AI chat tool open-sourced by Le Chatterie. A code issue vulnerability exists in AI Verger version 1.2.10 and earlier, which stems from incorrect manipulation of the parameter URLs in the file /src/main/services/mcp/oauth/provider.ts, which could lead to a deserialization attack...
编号撤回
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
EUVD-2022-38832
Malicious code in bioql PyPI...
EUVD-2023-2034
Malicious code in bioql PyPI...
EUVD-2024-52313
Malicious code in bioql PyPI...
EUVD-2025-19714
Malicious code in bioql PyPI...
EUVD-2025-17465
Malicious code in bioql PyPI...
EUVD-2023-42306
Malicious code in bioql PyPI...