EUVD-2025-41417

Malicious code in cici-kue51-sluey npm...

EUVD-2025-39213

Malicious code in vina-gulai25-ruro npm...

EUVD-2025-41661

Malicious code in arif-lontong95-riris npm...

EUVD-2025-41159

Malicious code in eko-mieaceh64-sukiwir npm...

EUVD-2025-39847

Malicious code in eka-gaplek76-sluey npm...

EUVD-2025-39161

Malicious code in wawan-sambel72-sluey npm...

EUVD-2025-40676

Malicious code in andi-ketoprak25-sukiwir npm...

EUVD-2025-39325

Malicious code in umi-gandul97-breki npm...

EUVD-2025-40382

Malicious code in bella-tomat19-riris npm...

EUVD-2025-40466

Malicious code in bayu-telurtahu17-breki npm...

EUVD-2025-40256

Malicious code in candra-miemee90-riris npm...

EUVD-2025-39692

Malicious code in fadhil-gaplek76-sukiwir npm...

CVE-2025-12922

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the component CRF Data Import. Performing manipulation of the argument xmlfile results in path traversal. The attack can be initiated remotely. T...

CVE-2025-12922 OpenClinica Community Edition CRF Data Import ImportCRFData path traversal

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the component CRF Data Import. Performing manipulation of the argument xmlfile results in path traversal. The attack can be initiated remotely. T...

CVE-2025-12922

CVE-2025-12922 affects OpenClinica Community Edition up to 3.12.2/3.13. The vulnerability resides in the CRF Data Import component, specifically the file path /ImportCRFData?action=confirm, where manipulation of the xml_file argument leads to a path traversal. The issue is exploitable remotely an...

PT-2025-46160

Name of the Vulnerable Software and Affected Versions Triofox versions prior to 16.7.10368.56560 Description Triofox is vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. This vulnerability, designated CVE-2025-12480, allows...

PT-2025-45609

Name of the Vulnerable Software and Affected Versions Looker Studio affected versions not specified Description An improper privilege management issue was identified in Looker Studio, affecting all JDBC-based connectors. A Looker Studio user with report view access could create a copy of a report...

CVE-2025-12397: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source. This vulnerability was patched on 21 Ju...

PT-2025-45607

Name of the Vulnerable Software and Affected Versions Looker Studio versions prior to 07 July 2025 Description A SQL injection issue was identified in Looker Studio, potentially allowing unauthorized data exfiltration from BigQuery data sources. An attacker could create a malicious report with...

Apple macOS Sequoia Permission Issue Vulnerability (CNVD-2025-29330)

Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia has a privilege issue vulnerability that can be exploited by attackers to cause an application to access sensitive user data...