21224 matches found
EUVD-2019-17404
Malware in sbrugna...
EUVD-2021-19454
Malware in sbrugna...
EUVD-2010-0472
Malware in sbrugna...
[SECURITY] Fedora 43 Update: chromium-141.0.7390.54-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
An Empirical Study of Security-Policy Related Issues in Open Source Projects
GitHub recommends that projects adopt a SECURITY.md file that outlines vulnerability reporting procedures. However, the effectiveness and operational challenges of such files are not yet fully understood. This study aims to clarify the challenges that SECURITY.md files face in the vulnerability...
ROS-20251007-03
The vulnerability of the high-performance open source DNS server PowerDNS Recursor is related to a a bug in the ECS implementation. Exploitation of the vulnerability could allow an attacker acting remotely, perform cache poisoning attacks...
Vibe Coding Is the New Open Source—in the Worst Way Possible
As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way...
Flowise security vulnerabilities
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise versions prior to 3.0.5 that stems from an unfiltered IFRAME element and could lead to a cross-site scripting attack...
[SECURITY] Fedora 43 Update: firefox-143.0.3-1.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CRMEB security vulnerabilities
CRMEB is a Java mall system of CRMEB open source. A security vulnerability exists in CRMEB 5.6 and earlier versions, which stems from an incorrect manipulation of the parameter cateid in the file /adminapi/product/product, which could lead to a SQL injection attack...
AI Verger code-related vulnerabilities
AI Verger is an AI chat tool open-sourced by Le Chatterie. A code issue vulnerability exists in AI Verger version 1.2.10 and earlier, which stems from incorrect manipulation of the parameter URLs in the file /src/main/services/mcp/oauth/provider.ts, which could lead to a deserialization attack...
ZKEACMS Authorization Issue Vulnerability
ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...
Number withdrawal
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
Number withdrawal
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...
Security Analysis of Ponzi Schemes in Ethereum Smart Contracts
The rapid advancement of blockchain technology has precipitated the widespread adoption of Ethereum and smart contracts across a variety of sectors. However, this has also given rise to numerous fraudulent activities, with many speculators embedding Ponzi schemes within smart contracts, resulting...
EUVD-2024-42702
Malicious code in bioql PyPI...
EUVD-2023-34933
Malicious code in bioql PyPI...
EUVD-2023-38093
Malicious code in bioql PyPI...