CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-11041

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

CVE-2025-11041

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

CVE-2025-11041 itsourcecode Open Source Job Portal index.php sql injection

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

CVE-2025-11041

CVE-2025-11041 affects itsourcecode Open Source Job Portal 1.0. The vulnerability is in the admin file /admin/user/index.php?view=edit, where manipulation of the ID parameter leads to SQL injection. Exploitation is remote and the vulnerability has been publicly disclosed. Connected documents repo...

CVE-2025-11041 itsourcecode Open Source Job Portal index.php sql injection

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

Itsourcecode Open Source Job Portal SQL Injection Vulnerability

itsourcecode Open Source Job Portal is itsourcecode open source an enterprise portal site . A SQL injection vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from incorrect manipulation of the parameter ID in the file /admin/user/index.php, which could lead t...

OpenBabel code issues and vulnerabilities

openbabel is a chemistry toolkit software from Open Babel open source. A code issue vulnerability exists in openbabel 3.1.1 and earlier versions, which stems from a null pointer dereference in the function ChemKinFormat::ReadReactionQualifierLines in the file /src/formats/chemkinformat.cpp, which...

PT-2025-39683

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal that allows for remote SQL injection. The issue is located in the file /admin/user/index.php?view=edit. Manipulation of the ID...

cAdvisor Unauthenticated Access

cAdvisor short for container Advisor is an open-source tool developed by Google that provides real-time monitoring and performance analysis of running containers. By default, cAdvisor does not require authentication to access the application. This allows an attacker to access sensitive data. No...

Ogre security vulnerability

ogre is a scene-oriented 3D engine open-sourced by OGRECave. A security vulnerability exists in ogre 14.4.1 and earlier versions, which originates from a heap buffer overflow in the STBIImageCodec::encode function in the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp, which could lead to a...

CVE-2025-11041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

H2O Flow Unauthenticated Access

H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. By default, H2O Flow does not require authentication to access the application. This allows an attacker to access sensitive data. This detection is...

Kea Improper Permissions Information Disclosure

The vulnerability of the open-source DHCP server Kea is related to the improper use of standard permissions. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

SecureAgentBench: Benchmarking Secure Code Generation under Realistic Vulnerability Scenarios

Large language model LLM powered code agents are rapidly transforming software engineering by automating tasks such as testing, debugging, and repairing, yet the security risks of their generated code have become a critical concern. Existing benchmarks have offered valuable insights but remain...

roncoo-pay authorization issue vulnerability

roncoo-pay roncoo payment system is an open source Internet payment system by Lead Class Network RonCoo. An authorization issue vulnerability exists in roncoo-pay, which stems from improper authorization of unknown functions in the file /user/info/lookupList, which could lead to a remote attack...

MAL-2025-47583 Malicious code in discord-open-source (npm)

The package discord-open-source was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8428b55f07242cb67f60ccba8d02146498255552e19df02bb8d05fce64279ac3 This package installs a dependency hosted on a custom domain that run...

Malicious code in discord-open-source (npm)

The package discord-open-source was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8428b55f07242cb67f60ccba8d02146498255552e19df02bb8d05fce64279ac3 This package installs a dependency hosted on a custom domain that run...

[SECURITY] Fedora 43 Update: chromium-140.0.7339.185-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

Vulnerability-Lookup: Cross-Site Scripting Vulnerabilities

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup version 2.16.0 that stems from insufficient cleanup of user input and could lead to a cross-site scripting attack...