82913 matches found
CVE-2025-12409
A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data sources. By creating a malicious report with native functions enabled, and having the victim access the report, an attacker could execute injected SQL queries with the victim's...
CVE-2025-12405
An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Looker Studio user with report view access could make a copy of the report and execute arbitrary SQL that would run on the data source database due to the stored credentials attache...
kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...
CVE-2025-7429
Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report...
EUVD-2025-74183
Malicious code in superbhedgehogblue-67 npm...
EUVD-2025-74685
Malicious code in everydaydogtan-13 npm...
EUVD-2025-74916
Malicious code in abstractorangutanaquamarine-80 npm...
EUVD-2025-74580
Malicious code in hiddenlocustjade-78 npm...
EUVD-2025-74081
Malicious code in willingturtlemaroon-50 npm...
EUVD-2025-74449
Malicious code in mistymeerkataqua-91 npm...
EUVD-2025-75177
Malicious code in xhhwtm-devapptea npm...
EUVD-2025-76094
Malicious code in orthodoxcoyote-tool npm...
EUVD-2025-75300
Malicious code in valuablestingray-teagooddev npm...
EUVD-2025-77416
Malicious code in bqqjlf-devapptea npm...
EUVD-2025-75319
Malicious code in urbancrayfish-appteadev npm...
EUVD-2025-75726
Malicious code in seblakkuah13 npm...
EUVD-2025-75658
Malicious code in sharedsnail-strongdev npm...
CVE-2025-7429
CVE-2025-7429 affects ZOHO ManageEngine Exchange Reporter Plus, with a Stored XSS vulnerability in the Mails Deleted or Moved report affecting versions 5723 and below. Connected documents consistently describe a cross-site scripting flaw in the web-based reporting product that could enable an att...