31379 matches found
CVE-2025-60983
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
CVE-2025-60983
CVE-2025-60983 is a reflected Cross Site Scripting (XSS) vulnerability affecting Rubikon Banking Solution version 4.0.3, specifically in the "Search For Customers Information" endpoints. The connected sources confirm the affected product and component, and describe the root cause as input reflect...
Hasleo Backup Suite 代码问题漏洞
Hasleo Backup Suite is a Windows backup and recovery software from Hasleo. A code issue vulnerability exists in Hasleo Backup Suite 5.2 and prior versions that stems from an unquoted search path in the component HasleoImageMountService/HasleoBackupSuiteService, which could lead to a local executi...
VeePN 代码问题漏洞
VeePN is a VPN service platform from VeePN Inc. A code issue vulnerability exists in VeePN 1.6.2 and earlier versions, which originates from an unquoted search path in the file C:Program Files x86VeePNavserviceavservice.exe, which could lead to a local attack...
PT-2025-43905
Name of the Vulnerable Software and Affected Versions CLTPHP version 3.0 Description A security issue exists in CLTPHP 3.0 related to SQL injection. Manipulation of the keyword argument within an unknown function of the /home/search.html file can lead to exploitation. The attack can be performed...
📄 ModernShop Cross Site Scripting
ModernShop suffers from a cross site scripting vulnerability. It is unclear what version is affected as they are not published where this software is sold. Exploit Title: ModernShop - RXSS Exploit Author: CraCkEr Date: 11-10-2025 Author of Script: ABHIRAM B Vendor: ABHI CODE BOX Vendor Homepage:...
Malicious Package
Overview qwant-search-extension is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
EulerOS 2.0 SP13 : git (EulerOS-SA-2025-2256)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command...
SUSE SLES12: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2025:3759-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:3759-1 advisory. - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as man...
SAND: A Self-Supervised and Adaptive NAS-Driven Framework for Hardware Trojan Detection
The globalized semiconductor supply chain has made Hardware Trojans HT a significant security threat to embedded systems, necessitating the design of efficient and adaptable detection mechanisms. Despite promising machine learning-based HT detection techniques in the literature, they suffer from ...
SUSE SLES15: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2025:3760-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3760-1 advisory. - Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has...
FreeBSD : RT -- CSV injection (b374df95-afa8-11f0-b4c8-792b26d8a051)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b374df95-afa8-11f0-b4c8-792b26d8a051 advisory. Gareth Watkin-Jones from 4armed reports: RT is vulnerable to CSV injection via ticket values with speci...
EUVD-2025-35705
gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the searchtable in bbs/search.php...
CVE-2025-61464
gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the searchtable in bbs/search.php...
GO-2025-3992 NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
CVE-2025-48099
Cross-Site Request Forgery CSRF vulnerability in Code Amp Search & Filter search-filter allows Cross Site Request Forgery.This issue affects Search & Filter: from n/a through = 1.2.17...
CVE-2025-11844
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...
SUSE-SU-2025:3760-1 Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...