3713 matches found
The Bastion 安全漏洞
The Bastion is an open source authentication system from OVHcloud. A security vulnerability exists in The Bastion that stems from a script that fails to properly sign a file, potentially leading to data integrity issues...
MAL-2025-47249 Malicious code in @nexe/logger (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c437c0929e0fe9f69607532dcf91adde5406cc1cf4e12f1f5b277d73e6e73474 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47357 Malicious code in tvi-cli (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78946397af9b739b00884d97f406ea16405f5558af770d05400083fd26e7061 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in remark-preset-lint-crowdstrike (npm)
Suspicious postinstall script executes a file with excessive bitwise math. Likely malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 165b629be2876c01b20135bbf391a92b4ae66e6645b8f390bcbb5373f8d43c5b Any computer that has this package installed or running should...
Malicious code in eslint-config-teselagen (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89578bb497a4146350263dc8ff6e50c742f9272af2886bd5afc2e0b26160082f Any computer that has this package installed or running should be considered fully compromised. All...
Patika Global HumanSuite 安全漏洞
Patika Global HumanSuite is a human resource management platform from Patika Global, Turkey. A security vulnerability exists in Patika Global HumanSuite versions prior to 53.21.0, which stems from a user-controllable key leading to authorization bypass and improper authorization, which could be...
MoneyPrinterTurbo 安全漏洞
MoneyPrinterTurbo is a software by Harry's personal developer that generates short HD videos using AI macromodels. A security vulnerability exists in MoneyPrinterTurbo version 1.2.6, which stems from a path traversal issue in the /api/v1/download/ URI that could lead to accessing sensitive files...
AVTECH EagleEyes 安全漏洞
AVTECH EagleEyes is a remote instant monitoring mobile application from AVTECH, a Taiwan, China-based company. A security vulnerability exists in AVTECH EagleEyes version 2.0.0, which originates from a custom X509TrustManager that only checks the certificate expiration date and skips TLS chain...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS that stems from insufficient privilege checking and could lead to accessing sensitive user data. The following versions are affected: macOS Sequoia prior to 15.7...
One Identity OneLogin 安全漏洞
One Identity OneLogin is an identity and access management software from US-based One Identity. A security vulnerability exists in One Identity OneLogin versions prior to 2025.3.0, which stems from the GET Apps API v2 returning OIDC client keys, which could lead to the disclosure of sensitive...
TOTOLINK Wi-Fi 6 Router Series 安全漏洞
TOTOLINK Wi-Fi 6 Router Series is a series of wireless routers from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK Wi-Fi 6 Router Series X2000R-Gh-V2.0.0 version, which stems from an improperly set default password and could lead to the remote execution of...
roncoo-pay 安全漏洞
roncoo-pay roncoo payment system is an Internet payment system open-sourced by Lead Class Network RonCoo. A security vulnerability exists in roncoo-pay, which stems from a misuse of the parameter orderNo in the file /auth/orderQuery, which could lead to a direct request attack...
Hoverfly 安全漏洞
Hoverfly is a lightweight open source API emulation tool open-sourced by SpectoLabs. A security vulnerability exists in Hoverfly 1.11.3 and earlier versions that stems from command injection and could lead to remote code execution...
Tourism-Management-System 安全漏洞
Tourism-Management-System is a visitor management system from the individual developers of SOHAM DAS. A security vulnerability exists in Tourism-Management-System version 2.0 that originates from a shell upload and could lead to remote code execution...
Indico 安全漏洞
Indico is a feature-rich event management system from Indico Open Source. A security vulnerability exists in Indico versions prior to 3.3.8, which stems from improper access checking and could lead to unauthorized retrieval of another user's personal data...
Rockwell Automation FactoryTalk Analytics LogixAI 安全漏洞
Rockwell Automation FactoryTalk Analytics LogixAI is an embedded AI analytics module from Rockwell Automation. A security vulnerability exists in Rockwell Automation FactoryTalk Analytics LogixAI that stems from excessive privileges on a Redis instance, which could lead to data leakage or tamperi...
Mezereon Smart Search & Filter Shopify 安全漏洞
Mezereon Smart Search & Filter Shopify is a filter software from Mezereon USA. A security vulnerability exists in Mezereon Smart Search & Filter Shopify version 1.0, which stems from vulnerability to cross-site scripting attacks...
PrestaShop 安全漏洞
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop versions prior to 8.2.1, which stems from a reset password feature that...
