Malicious code in frugal-s3 (npm)

The package frugal-s3 was found to contain malicious code...

Malicious code in @zalastax/nolb-react-s3 (npm)

The package @zalastax/nolb-react-s3 was found to contain malicious code...

Malicious code in ckeditor5-s3-upload (npm)

The package ckeditor5-s3-upload was found to contain malicious code...

Malicious code in acme-http-01-s3 (npm)

The package acme-http-01-s3 was found to contain malicious code...

MAL-2025-13755 Malicious code in @zalastax/nolb-react-s3 (npm)

The package @zalastax/nolb-react-s3 was found to contain malicious code...

MAL-2025-32594 Malicious code in s3-lister-js (npm)

The package s3-lister-js was found to contain malicious code...

Malicious code in s3-lister-js (npm)

The package s3-lister-js was found to contain malicious code...

Malicious code in arc-macro-s3-bucket (npm)

The package arc-macro-s3-bucket was found to contain malicious code...

MAL-2025-14010 Malicious code in acme-http-01-s3 (npm)

The package acme-http-01-s3 was found to contain malicious code...

MAL-2025-21001 Malicious code in frugile-s3 (npm)

The package frugile-s3 was found to contain malicious code...

SUSE-SU-2025:02762-1 Security update for eclipse-jgit

This update for eclipse-jgit fixes the following issues: - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647...

CVE-2025-8271

A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletes3.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-8249

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The explo...

Code-Projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission has a SQL injection vulnerability that stems from improper handling of the credits parameter in the /admin/updates3.php file. No details of the vulnerability are provided at this time...

CVE-2025-52454

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server on Windows, Linux Amazon S3 Connector modules allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52454

Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server on Windows, Linux Amazon S3 Connector modules allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52454

Summary (CVE-2025-52454) : A Server-Side Request Forgery (SSRF) vulnerability exists in Salesforce Tableau Server on Windows and Linux via the Amazon S3 Connector modules, enabling Resource Location Spoofing. Affected versions are Tableau Server before 2025.1.3, before 2024.2.12, and before 2023....

PT-2025-30927 · Tableau · Tableau Server

Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: A Server-Side Request Forgery SSRF vulnerability exists in Tableau Server on Windows and Linux system...

Salesforce Tableau Server 安全漏洞

Salesforce Tableau Server is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau Server versions prior to 2025.1.3, prior to 2024.2.12, and prior to 2023.3.19, which stems from insufficient validation of the Amazon S3 Connector...

Security update for ovmf

This update for ovmf fixes the following issues: CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Other fixes: Fixed Kubevirt GPU passthrough failure bsc1245542 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...