82899 matches found
MAL-2025-45641 Malicious code in putri-kentang5-breki (npm)
The package putri-kentang5-breki was found to contain malicious code...
MAL-2025-42917 Malicious code in @teamteanpm2024/vitae-suscipit-quidem (npm)
The package @teamteanpm2024/vitae-suscipit-quidem was found to contain malicious code...
OESA-2025-2108 aide security update
Security Fixes: A vulnerability was found in AIDE up to 0.19.1 and classified as problematic.Using CWE to declare the problem leads to CWE-117. The product does not neutralize or incorrectly neutralizes output that is written to logs.Impacted is integrity.Upgrading to version 0.19.2 eliminates th...
Linux Distros Unpatched Vulnerability : CVE-2024-25980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided...
Linux Distros Unpatched Vulnerability : CVE-2023-5551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. CVE-2023-5551 Note that Nessus...
UBUNTU-CVE-2025-38701
In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINEDATAFL lacks system.data xattr A syzbot fuzzed image triggered a BUGON in ext4updateinlinedata when an inode had the INLINEDATAFL flag set but was missing the system.data extended attribute. Since this...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper validation of user input in the dataAppReportCodeid and dataAppReportCodename parameters within the /apprain/appreport/manage/ process. An attacker can execute arbitrary scripts in the context of a...
CVE-2025-41043 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAppReportCodeid' and 'dataAppReportCodename' parameters in /apprain/appreport/manage/...
HID: core: ensure the allocated report buffer can contain the reserved report ID
...
HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow
...
PT-2025-35914
Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is triggered through the dataAppReportCodeid and dataAppReportCodename...
PHPGurukul Beauty Parlour Management System SQL注入漏洞
PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.1 of the PHPGurukul Beauty Parlour Management System, which stems from improper manipulation of the parameter viewid in the file /admin/view-appointment.php, which...
GNU Bison scan-code.c code_free double free
...
CVE-2025-9865
creationtimestamp| type| source ---|---|--- 2025-09-03 20:28:33+00:00| seen| https://gist.github.com/Darkcrai86/7c1e8139c5a81c9379b8425ee39f3e0f 2025-09-07 02:38:11+00:00| seen| https://bsky.app/profile/secqube.com/post/3ly7nv5esx32a...
CVE-2025-58639
creationtimestamp| type| source ---|---|--- 2025-09-03 17:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx6aqzl5g27...
Akinsoft MyRezzta 安全漏洞
Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta that stems from improperly limiting authentication attempts, and no detailed vulnerability details are available at this time...
Linux Distros Unpatched Vulnerability : CVE-2024-48898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permissi...
Linux Distros Unpatched Vulnerability : CVE-2024-48901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle. Additional checks are required to ensure users can only access the schedule of a report if they have permission to edit tha...
