MAL-2025-44575 Malicious code in heix-erlinglingsan-part5 (npm)

The package heix-erlinglingsan-part5 was found to contain malicious code...

MAL-2025-44966 Malicious code in laila-esdoger69-breki (npm)

The package laila-esdoger69-breki was found to contain malicious code...

Malicious code in nikeyi-zaitaluo-yidian (npm)

The package nikeyi-zaitaluo-yidian was found to contain malicious code...

MAL-2025-42917 Malicious code in @teamteanpm2024/vitae-suscipit-quidem (npm)

The package @teamteanpm2024/vitae-suscipit-quidem was found to contain malicious code...

MAL-2025-45641 Malicious code in putri-kentang5-breki (npm)

The package putri-kentang5-breki was found to contain malicious code...

OESA-2025-2108 aide security update

Security Fixes: A vulnerability was found in AIDE up to 0.19.1 and classified as problematic.Using CWE to declare the problem leads to CWE-117. The product does not neutralize or incorrectly neutralizes output that is written to logs.Impacted is integrity.Upgrading to version 0.19.2 eliminates th...

Linux Distros Unpatched Vulnerability : CVE-2024-25980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided...

Linux Distros Unpatched Vulnerability : CVE-2023-5551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. CVE-2023-5551 Note that Nessus...

The vulnerability of the apple_magic_backlight_report_set() function in the HID component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the applemagicbacklightreportset function in the HID component of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a perpetrator to trigger a service failure...

UBUNTU-CVE-2025-38701

In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINEDATAFL lacks system.data xattr A syzbot fuzzed image triggered a BUGON in ext4updateinlinedata when an inode had the INLINEDATAFL flag set but was missing the system.data extended attribute. Since this...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper validation of user input in the dataAppReportCodeid and dataAppReportCodename parameters within the /apprain/appreport/manage/ process. An attacker can execute arbitrary scripts in the context of a...

CVE-2025-41043 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAppReportCodeid' and 'dataAppReportCodename' parameters in /apprain/appreport/manage/...

HID: core: ensure the allocated report buffer can contain the reserved report ID

...

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

...

PHPGurukul Beauty Parlour Management System SQL注入漏洞

PHPGurukul Beauty Parlour Management System is an application from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.1 of the PHPGurukul Beauty Parlour Management System, which stems from improper manipulation of the parameter viewid in the file /admin/view-appointment.php, which...

PT-2025-35914

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The vulnerability is triggered through the dataAppReportCodeid and dataAppReportCodename...

GNU Bison scan-code.c code_free double free

...

CVE-2025-9865

creationtimestamp| type| source ---|---|--- 2025-09-03 20:28:33+00:00| seen| https://gist.github.com/Darkcrai86/7c1e8139c5a81c9379b8425ee39f3e0f 2025-09-07 02:38:11+00:00| seen| https://bsky.app/profile/secqube.com/post/3ly7nv5esx32a...

CVE-2025-58639

creationtimestamp| type| source ---|---|--- 2025-09-03 17:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxx6aqzl5g27...

Akinsoft MyRezzta 安全漏洞

Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta that stems from improperly limiting authentication attempts, and no detailed vulnerability details are available at this time...