Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from a logic issue that could cause an application to access...

Apple macOS 安全漏洞

ch is a ClickHouse open source low-level Go client for ClickHouse. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege checking and could result in access to sensitive user data...

Codeshare 安全漏洞

Codeshare is an open source code contribution tool from Codeshare. A security vulnerability exists in Codeshare version v1.0.0 that stems from a risk of information disclosure...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that originates from memory reuse after release...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from a policy bypass in Extensions...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source, a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog version 4.0.11, which stems from a lack of authorization checking in the uploadAttachByUrl API endpoint, which could lead to server-side request forgery...

Zucchetti Ad Hoc Revolution 安全漏洞

Zucchetti Ad Hoc Revolution is a business data processing system from Zucchetti, Italy. A security vulnerability exists in Zucchetti Ad Hoc Revolution 4.1 and earlier versions, which stems from an unvalidated pHtmlSource parameter that could lead to a cross-site scripting attack...

Malicious code in ais-sn-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2dae2da223bd605098cfd095d8e5adea72f0262e1c387f483fe9048a17215e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WAVLINK QUANTUM D3G和WAVLINK WL-WN530HG3 安全漏洞

WAVLINK QUANTUM D3G and WAVLINK WL-WN530HG3 are both products of China RuiYin WAVLINK company.WAVLINK QUANTUM D3G is a router.WAVLINK WL-WN530HG3 is a WiFi router. A security vulnerability exists in the WAVLINK QUANTUM D3G and WAVLINK WL-WN530HG3 that originates from a stack-based buffer overflow...

Wimi Teamwork 安全漏洞

Wimi Teamwork is a team collaboration cloud platform from Wimi USA. A security vulnerability exists in Wimi Teamwork versions prior to 7.38.17 that stems from the API not validating the csrftoken field value, which could lead to a cross-site request forgery attack...

HubSpot 安全漏洞

HubSpot is a customer relationship management platform in the United States. A security vulnerability exists in HubSpot version v1.29441, which stems from improper access control of REST API endpoints and could lead to unauthorized viewing of user data...

InventoryGui 安全漏洞

InventoryGui is a plugin library from the individual developer Max Lee. A security vulnerability exists in InventoryGui 1.6.1-SNAPSHOT and prior versions, which stems from a vulnerability that may allow item duplication when using GuiStorageElement...

InventoryGui 安全漏洞

InventoryGui is a plugin library by the individual developer Max Lee. A security vulnerability exists in InventoryGui versions prior to 1.6.5 that stems from allowing items to be removed when using GuiStorageElement, which may result in item duplication...

LearnHouse 安全漏洞

LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has a security vulnerability that stems from an insufficient restriction of the parameter thumbnail in the component Course Thumbnail Handler in files/api/v1/courses/, which could lead to arbitrary file...

Perx Customer Engagement & Loyalty Platform 安全漏洞

Perx Customer Engagement & Loyalty Platform is a customer engagement campaign platform from Perx Singapore. A security vulnerability exists in Perx Customer Engagement & Loyalty Platform versions prior to 4.617.4, which stems from improperly cleaned SVG file uploads and could lead to a stored...

BeWelcome 安全漏洞

BeWelcome is a travel sharing site open-sourced by BeWelcome. BeWelcome has a security vulnerability that stems from improper handling of deserialization of the POST parameters formkitmemoryrecovery and memory cookie bwRemember, which could lead to a PHP object injection attack...

SICK AG TLOC100-100 安全漏洞

The SICK AG TLOC100-100 is a mobile robot positioning system from SICK Germany. A security vulnerability exists in the SICK AG TLOC100-100 that stems from an attacker's access to a non-privileged account via SSH could result in a service interruption, causing a loss of persistent availability...

VirtueMart 安全漏洞

VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! A security vulnerability exists in VirtueMart versions 1.0.0 through 4.4.10, which stems from an unauthenticated reflected cross-site scripting attack...

PerfreeBlog 安全漏洞

PerfreeBlog is PerfreeBlog open source a java-based development of blog/CMS site building platform. PerfreeBlog v4.0.11 version of a security vulnerability , the vulnerability stems from installTheme function has a file upload vulnerability...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the presence of a serious authentication flaw that could lead to a...