3713 matches found
Hikvision iSecure Center 安全漏洞
Hikvision iSecure Center is an integrated security management platform from Hikvision China. A security vulnerability exists in Hikvision iSecure Center that stems from improper file upload validation, which could result in the upload of malicious files...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from unauthenticated user account creatio...
ThingsBoard 安全漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard versions prior to 4.2.1 that stems from a server-side request forgery in the Image Upload Gallery feature of the dashboard,...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from allowing the upload of specially crafted PDF files and could lead to the execution of arbitrary code...
Aggie 安全漏洞
aggie is Technology & International Development Lab's open source software for tracking events around real-time events such as elections or natural disasters using social media and other sources. Aggie version 2.6.1 has a security vulnerability that stems from a host header injection in the Forgo...
ChatLuck 安全漏洞
ChatLuck is an enterprise internal and external communication software from ChatLuck Japan. A security vulnerability exists in ChatLuck that stems from insufficient access control granularity when inviting guest users, which could result in uninvited guest users registering as guest users...
Frigate 安全漏洞
Frigate is a complete local NVR designed for home assistants with AI object detection by Blake Blackshear Personal Developer. A security vulnerability exists in Frigate versions prior to 0.16.2 that stems from an export workflow that allows an operator to specify an arbitrary filesystem location ...
Phoenix Contact多款产品 安全漏洞
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and others are an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in a number of Phoenix Contact products. The vulnerability stems from the ability of an unauthenticated attacker to...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...
Burgerportaal 安全漏洞
Burgerportaal is a GPP-Woo open source site for reading public documents. A security vulnerability exists in Burgerportaal versions prior to 2.0.3, prior to 3.0.2, and prior to 4.0.1, which stems from the exposure of employee names and e-mail addresses in a web response, which could lead to...
MAL-2025-48308 Malicious code in vite-plugin-es6-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04fac94db34a750bac1ae88f46269718450d383d01b84a102872d0a2f6748918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redirect-47cprv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 805fa2724922cd5611fa30b7edd9bbf19375b36b1d910e2e30a32bfcb07bbfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48155 Malicious code in redirect-eqtqym (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51dd748122a487e0ade7375c311b741f6c69a606fc7ebb2930ed1e5b8f9a9711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Deno 安全漏洞
Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A security vulnerability exists in Deno versions prior to 2.5.3 and prior to 2.2.15, which stems from the fact that the utime and utimeSync methods are not constrained by the privilege model,...
How Your AI Chatbot Can Become a Backdoor
In this post of THE AI BREACH, learn how your Chatbot can become a backdoor...
EUVD-2012-1515
Malware in sbrugna...
EUVD-2012-5944
Malware in sbrugna...
EUVD-2020-20284
Malware in sbrugna...