21224 matches found
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console( CVE-2022-1471,CVE-2024-22259,CVE-2020-8565, CVE-2019-11250,CVE-2023-44487,CVE-2022-46175, CVE-2024-22243)
Summary SnakeYaml Constructor Deserialization Remote Code Execution. Spring-web-6.0.11, k8s.io-client-go, k8s.io-Apimachinery-v0.25.1, json5-1.0.1, spring-web-6.0.11 open source libraries are used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the...
Malicious code in v0-next-shadcn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SourceCodester Hotel and Lodge Management System SQL Injection Vulnerability
SourceCodester Hotel and Lodge Management System is SourceCodester open source hotel and lodge management system. A SQL injection vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from an incorrect manipulation of the parameter currsymbol in the fil...
Pixel Update Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2025-10-01 or later address all issues in this bulletin and all issues in the October 2025 Android...
UEFI EDK2 Data Protection Violation
The vulnerability of open-source development environments for UEFI EDK2 is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
Casdoor security vulnerability
Casdoor is an open source platform from Casdoor Open Source that supports multiple authentication and authorization protocols. A security vulnerability exists in Casdoor versions prior to 2.26.0, which stems from a flaw in the permission validation module and editing interface that could lead to ...
Another Critical RCE Discovered in a Popular MCP Server
Artificial Intelligence development is moving faster than secure coding practices, and attackers are taking notice. Imperva Threat Research recently uncovered and disclosed a critical Remote Code Execution RCE vulnerability CVE-2025-53967 in the Framelink Figma MCP Server. This is just one exampl...
Google's New AI Doesn't Just Find Vulnerabilities — It Rewrites Code to Patch Them
Google's DeepMind division on Monday announced an artificial intelligence AI-powered agent called CodeMender that automatically detects, patches, and rewrites vulnerable code to prevent future exploits. The efforts add to the company's ongoing efforts to improve AI-powered vulnerability discovery...
Google's New AI Doesn't Just Find Vulnerabilities — It Rewrites Code to Patch Them
Google's DeepMind division on Monday announced an artificial intelligence AI-powered agent called CodeMender that automatically detects, patches, and rewrites vulnerable code to prevent future exploits. The efforts add to the company's ongoing efforts to improve AI-powered vulnerability discovery...
security-research
Security Research This project hosts security advisories and...
[SECURITY] Fedora 42 Update: chromium-141.0.7390.54-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
EUVD-2009-3421
Malware in sbrugna...
EUVD-2021-19518
Malware in sbrugna...
EUVD-2020-7216
Malware in sbrugna...
EUVD-2007-4504
Malware in sbrugna...
EUVD-2012-5702
Malware in sbrugna...
EUVD-2014-3977
Malware in sbrugna...
EUVD-2021-19454
Malware in sbrugna...