Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from an administrator being able to change the mautic application...

Linux Distros Unpatched Vulnerability : CVE-2021-21255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI versi...

Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rancher 安全漏洞

Rancher is an open source container management platform from Rancher Open Source in the United States, built for organizations that deploy containers in production environments. A security vulnerability exists in Rancher that stems from an unrestricted request body size that could lead to a denia...

Tirreno 安全漏洞

tirreno is a security analyzer from tirreno open source. A security vulnerability exists in Tirreno version v0.9.5, which stems from improper handling of the columns0data parameter and could lead to an SQL injection attack...

MAL-2025-46955 Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...

MAL-2025-46932 Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e907c6e8d9b369e32e165c27d2a66931e8ecbb4b256a932542731234e6cf8da The OpenSSF Package Analysis project identified 'monolith-twirp-merge-queue-go-mergequeueservice' @ 1.0.2 rubygems as malicious. It is considere...

[SECURITY] Fedora 42 Update: chromium-139.0.7258.154-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

Sim Studio 路径遍历漏洞

Sim Studio is an AI agent workflow builder from the Sim Studio open source. A path traversal vulnerability exists in Sim Studio that stems from an incorrect manipulation of the parameter filePath leading to a path traversal attack...

Saad Irfan RemoteClinic 安全漏洞

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from an incorrect manipulation of the parameter image in the fil...

MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2006-3227

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:30+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Integrated Simulation Framework for Adversarial Attacks on Autonomous Vehicles

Autonomous vehicles AVs rely on complex perception and communication systems, making them vulnerable to adversarial attacks that can compromise safety. While simulation offers a scalable and safe environment for robustness testing, existing frameworks typically lack comprehensive supportfor...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter nmtipo in the file /intranet/educartipoensinocad.php...

O2OA 安全漏洞

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting due to incorrect manipulation of the parameters name/alias/description in the file...

Learning Management System 安全漏洞

Learning Management System is itsourcecode open source a learning management system. A security vulnerability exists in Learning Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter Username in the file /admin/login.php...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /module/AreaConhecimento/view...

Linux Distros Unpatched Vulnerability : CVE-2021-21441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Atta...

Malicious code in @callcenter-frontend/services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...

OESA-2025-2088 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication...