13152 matches found
Joomla! Code Issues and Vulnerabilities
Joomla! is a free, open source content management system from Joomla! A code issue vulnerability exists in Joomla! versions 1.0.0-4.0.0 and 5.0.0-5.0.1, which stems from a flaw in the decompression feature that could lead to remote code execution...
OpenBao has an unspecified vulnerability (CNVD-2025-18600)
OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which can be exploited by attackers to cause information leakage...
Pushing the Limits of Frequency Analysis in Leakage Abuse Attacks
Searchable encryption SE is the most scalable cryptographic primitive for searching on encrypted data. Typical SE constructions often allow access-pattern leakage, revealing which encrypted records are retrieved in the server's responses. All the known generic cryptanalyses assume either that the...
Linux Distros Unpatched Vulnerability : CVE-2024-42105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserved inodes. This series fixes one use-after-free issue reported ...
MAL-2025-27367 Malicious code in new-range (npm)
The package new-range was found to contain malicious code...
Malicious code in new-range (npm)
The package new-range was found to contain malicious code...
MAL-2025-36524 Malicious code in test-mlw2-tuxes-range (npm)
The package test-mlw2-tuxes-range was found to contain malicious code...
Malicious code in test-mlw2-tuxes-range (npm)
The package test-mlw2-tuxes-range was found to contain malicious code...
Malicious code in via-date-range (npm)
The package via-date-range was found to contain malicious code...
eksi-server (>=0.0.0, <=0.0.8), eksi-sozluk (>=0.0.0, <=0.0.13) +2 more potentially affected by unknown CVE via new-range (0.0.0)
new-range NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on new-range and may be impacted: - eksi-server =0.0.0, =0.0.0, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27367...
MAL-2025-38289 Malicious code in via-date-range (npm)
The package via-date-range was found to contain malicious code...
CVE-2025-53221
CVE-2025-53221 affects WordPress plugin CodeablePress (
CVE-2025-53241
CVE-2025-53241 is a Server-Side Request Forgery (SSRF) affecting the WordPress Simplified plugin, with vulnerable versions listed as n/a through 1.0.9 (and related notes indicating up to 1.0.11 in advisories). The underlying issue is an SSRF vulnerability in Simplified that permits the server to ...
CVE-2025-54409 AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)
AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a...
CVE-2025-36047 IBM WebSphere Application Server Liberty denial of service
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2025-28987
Server-Side Request Forgery SSRF vulnerability in PressForward PressForward pressforward allows Server Side Request Forgery.This issue affects PressForward: from n/a through = 5.9.5...
IBM WebSphere Application Server Liberty 17.0.0.3 < 25.0.0.9 (7242027)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7242027 advisory. - IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a...
PT-2025-33258 · WordPress · Magical Posts Display
Name of the Vulnerable Software and Affected Versions: Magical Posts Display versions 1.0.0 through 1.2.52 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update Magical Posts Display to...
CVE-2025-54063
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...
