CVE-2025-61762

The CVE-2025-61762 entry concerns Oracle PeopleSoft Payables (component: Payables) in PeopleSoft Enterprise FIN Payables, affected in version 9.2. The connected sources confirm an HTTP-based, network-accessible vulnerability that low-privilege attackers can exploit to perform unauthorized updates...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...

CVE-2025-61748

...

CVE-2025-53069

...

CVE-2025-53064

...

CVE-2025-53062

...

CVE-2025-53044

...

Ubuntu: Security Advisory (USN-7822-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in unclesky5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a6db403a22b058f1960f850fb70b353baeee04b4fc240846549f33ef355ef31 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

EUVD-2025-34995

Malicious code in iwf-ant-design-draggable-modal npm...

JLSEC-2025-68 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain...

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

OESA-2025-2479 poppler security update

is a PDF rendering library. Security Fixes: Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in...

Malicious code in @gtpn/eslint-config-progressive (npm)

The package @gtpn/eslint-config-progressive was found to contain malicious code...

MAL-2025-48464 Malicious code in @custom-widget/sdk (npm)

The package @custom-widget/sdk was found to contain malicious code...

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an authentication vulnerability in an undisclosed URL in the...

EUVD-2025-34426

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability...

org.eclipse.jgit: XXE vulnerability in Eclipse JGit

A flaw was found in Eclipse JGit. This vulnerability can allow information disclosure, denial of service, and other security issues when parsing XML files...

2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5066836)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2025-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5066791)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...