19815 matches found
Rancher 数据伪造问题漏洞
Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. Rancher suffers from a Data Forgery Issue vulnerability that stems from a flaw in the SAML authentication protocol that could lea...
Adaptive Deception Framework with Behavioral Analysis for Enhanced Cybersecurity Defense
This paper presents CADL Cognitive-Adaptive Deception Layer, an adaptive deception framework achieving 99.88% detection rate with 0.13% false positive rate on the CICIDS2017 dataset. The framework employs ensemble machine learning Random Forest, XGBoost, Neural Networks combined with behavioral...
Yoshop 安全漏洞
Yoshop is a Chinese yiovo open source e-commerce system. A security vulnerability exists in Yoshop version 2.0, which originates from unvalidated goodsIds parameter and may lead to SQL injection attack...
Creativeitem Ekushey CRM 跨站脚本漏洞
Creativeitem Ekushey CRM is an open source project management script by Creativeitem. A cross-site scripting vulnerability exists in Creativeitem Ekushey CRM that stems from insufficient validation of user input and could lead to a stored cross-site scripting attack...
FalseCrashReducer: Mitigating False Positive Crashes in OSS-Fuzz-Gen Using Agentic AI
Fuzz testing has become a cornerstone technique for identifying software bugs and security vulnerabilities, with broad adoption in both industry and open-source communities. Directly fuzzing a function requires fuzz drivers, which translate random fuzzer inputs into valid arguments for the target...
[SECURITY] Fedora 42 Update: firefox-143.0.3-1.fc42
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the rtwusbprobe function that could lead to memory exhaustion...
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...
编号撤回
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics
Summary There are vulnerabilities in Open Source Software OSS components consumed by IBM Planning Analytics. Additionally, IBM Planning Analytics is vulnerable to Cross-site scripting. This Security Bulletin relates only to the direct usage of third-party components by IBM Planning Analytics...
Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition
Wiz and the leading CSPs are launching one of the largest hacking competitions ever to secure the open-source software powering the cloud ecosystem...
OpenSSL Toolkit 3.5.4
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.5 LTS release...
From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization
Large language models show promise for vulnerability discovery, yet prevailing methods inspect code in isolation, struggle with long contexts, and focus on coarse function- or file-level detections - offering limited actionable guidance to engineers who need precise line-level localization and...
OpenSSL Toolkit 3.4.3
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.4 release...
OpenSSL Toolkit 3.3.5
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.3 release...
OpenSSL Toolkit 3.0.18
OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.0 LTS release...
AgentAPI 安全漏洞
AgentAPI is a Coder open source interface project. A security vulnerability exists in AgentAPI 0.3.3 and earlier versions, which stems from a susceptibility to client-side DNS rebinding attacks that could lead to unauthorized disclosure of sensitive user data...
CVE-2025-59934
Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...
CVE-2025-61622
creationtimestamp| type| source ---|---|--- 2025-09-29 12:21:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/229 2025-09-29 14:56:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lzybg6twzd2o 2025-10-01 11:24:40+00:00| seen|...
