Revive Adserver Authorization Bypass Vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from an...

Code-Projects Question Paper Generator SQL Injection Vulnerability

Code-Projects Question Paper Generator is an open source question paper generation software from Code-Projects. Code-Projects Question Paper Generator version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Fname in the file /signupscript.php...

Revive Adserver User Management System Design Insecurity Vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver has a user...

DUALGUAGE: Automated Joint Security-Functionality Benchmarking for Secure Code Generation

Large language models LLMs and autonomous coding agents are increasingly used to generate software across a wide range of domains. Yet a core requirement remains unmet: ensuring that generated code is secure without compromising its functional correctness. Existing benchmarks and evaluations for...

Revive Adserver Username In-Blank Neutralization and Improper Vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

commix-master

Commix short for command injection exploi...

MAL-2025-190619 Malicious code in hyatt-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45791aa99b3cab0aaa98d1564ffb2226c039f7e31723b2b4e6033d482e1ad3d6 The package hyatt-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190608 Malicious code in o2-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12445272ee24c376909e302bc2f4fe2c23af7aae5479ca74493a57adcdd4f028 The package o2-modal was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190605 Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190603 Malicious code in airbnb-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a37ecd19e914e8801e6398f69fea68500fc8c985d6bff3dc5613aaf0ea09692 The package airbnb-phoenix was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-64720

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

CVE-2025-64505

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

CVE-2025-65018

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

UBUNTU-CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

UBUNTU-CVE-2025-13470

In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...

StealthCup: Realistic, Multi-Stage, Evasion-Focused CTF for Benchmarking IDS

Intrusion Detection Systems IDS are critical to defending enterprise and industrial control environments, yet evaluating their effectiveness under realistic conditions remains an open challenge. Existing benchmarks rely on synthetic datasets e.g., NSL-KDD, CICIDS2017 or scripted replay frameworks...

Minder security vulnerabilities

Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in Minder that stems from improper content acquisition and could lead to unauthorized...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

Revive Adserver security vulnerability

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...