3718 matches found
Moodle 安全漏洞
Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from failure to properly validate enrollment status, which could cause...
TP-Link Omada gateways 安全漏洞
TP-Link Omada gateways is a security gateway from China P&L TP-Link. A security vulnerability exists in TP-Link Omada gateways that originates from a remote unauthenticated attacker who could execute arbitrary OS commands...
TP-Link Omada gateways 安全漏洞
TP-Link Omada gateways is a security gateway from China P&L TP-Link. A security vulnerability exists in TP-Link Omada gateways, which stems from a possible command injection attack on administrators after Web portal authentication...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from improper access control and no rate limiting, which could lead to resource exhaustion and denial of service attacks...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from allowing the upload of specially crafted PDF files and could lead to the execution of arbitrary code...
ThingsBoard 安全漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard versions prior to 4.2.1, which stems from insufficient cleanup of uploaded SVG files and improper validation of content type...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in the Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from an unimplemented access control ...
Hikvision iSecure Center 安全漏洞
Hikvision iSecure Center is an integrated security management platform from Hikvision China. A security vulnerability exists in Hikvision iSecure Center that stems from improper file upload validation, which could result in the upload of malicious files...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from unauthenticated user account creatio...
ThingsBoard 安全漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard versions prior to 4.2.1 that stems from a server-side request forgery in the Image Upload Gallery feature of the dashboard,...
ChatLuck 安全漏洞
ChatLuck is an enterprise internal and external communication software from ChatLuck Japan. A security vulnerability exists in ChatLuck that stems from insufficient access control granularity when inviting guest users, which could result in uninvited guest users registering as guest users...
Aggie 安全漏洞
aggie is Technology & International Development Lab's open source software for tracking events around real-time events such as elections or natural disasters using social media and other sources. Aggie version 2.6.1 has a security vulnerability that stems from a host header injection in the Forgo...
Frigate 安全漏洞
Frigate is a complete local NVR designed for home assistants with AI object detection by Blake Blackshear Personal Developer. A security vulnerability exists in Frigate versions prior to 0.16.2 that stems from an export workflow that allows an operator to specify an arbitrary filesystem location ...
Phoenix Contact多款产品 安全漏洞
Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP and others are an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. A security vulnerability exists in a number of Phoenix Contact products. The vulnerability stems from the ability of an unauthenticated attacker to...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...
Burgerportaal 安全漏洞
Burgerportaal is a GPP-Woo open source site for reading public documents. A security vulnerability exists in Burgerportaal versions prior to 2.0.3, prior to 3.0.2, and prior to 4.0.1, which stems from the exposure of employee names and e-mail addresses in a web response, which could lead to...
MAL-2025-48308 Malicious code in vite-plugin-es6-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04fac94db34a750bac1ae88f46269718450d383d01b84a102872d0a2f6748918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redirect-47cprv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 805fa2724922cd5611fa30b7edd9bbf19375b36b1d910e2e30a32bfcb07bbfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48155 Malicious code in redirect-eqtqym (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51dd748122a487e0ade7375c311b741f6c69a606fc7ebb2930ed1e5b8f9a9711 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
