ClipBucket 安全漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A security vulnerability exists in ClipBucket 2.6 and earlier versions, which stems from an unauthenticated ofcuploadimage.php endpoint that could lead to arbitrary fil...

CVE-2025-54433 Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion

Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3, and 1.7.0 through 1.7.3, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outsi...

MAL-2025-6379 Malicious code in vite-postcss-nested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b82844a67ec3b8867102d72b3fc6c039e456bf27ae2cc4679ff7d3d831c1c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6371 Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6366 Malicious code in node-loggerx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f40908b2a7b04409b374e0ebaa8c64795147e55c355bdc0c3d3d783d5180e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6362 Malicious code in flowhint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d02865586d06eac74ab9d563763e3996029df4b82ee5f4cfdd9dcb9ff134379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware code base from China Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a corrupted SMM memory in the SMM module...

InsydeH2O 安全漏洞

InsydeH2O is a customizable firmware codebase from China-based Insyde Insyde. A security vulnerability exists in InsydeH2O that originates from a stack overflow in the SMI handler...

PrestaShop 安全漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop version v8.2.0, which stems from a PHAR deserialization issue in...

Electronic Hub playground.electronhub.ai 安全漏洞

Electronic Hub playground.electronhub.ai is an AI big modeling platform from Electronic Hub, Inc. A security vulnerability exists in Electronic Hub playground.electronhub.ai v1.1.9, which originates from cross-site scripting...

Elastic 安全漏洞

Elastic is a suite of open source distributed RESTful search engines built on Lucene by Elastic Netherlands. The product is primarily used in cloud computing and supports data indexing using JSON over HTTP. A security vulnerability exists in Elastic that stems from improper handling of directory...

How the FBI got everything it wanted (re-air) (Lock and Code S06E15)

This week on the Lock and Code podcast… For decades, digital rights activists, technologists, and cybersecurity experts have worried about what would happen if the US government secretly broke into people’s encrypted communications. The weird thing, though, is that, in 2018, it already happened...

Aeroflot Hacked

Looks serious...

Skops 安全漏洞

Skops is a Python library from the Skops project that helps share scikit-learn-based models and put them into production. A security vulnerability exists in Skops 0.11.0 and earlier versions, which stems from OperatorFuncNode inconsistencies and could lead to arbitrary code execution...

Skops 安全漏洞

Skops is a Python library from the Skops project that helps share scikit-learn-based models and put them into production. A security vulnerability exists in Skops 0.11.0 and earlier versions, which stems from a MethodNode inconsistency that could lead to arbitrary code execution...

CVE-2015-10143

The CVE-2015-10143 entry concerns the Platform theme for WordPress prior to version 1.4.4, where a missing capability check in the _ajax_save_options() function allows unauthenticated modification of options. Affects the Platform theme (WordPress Platform) and enables updating arbitrary site opti...

ChanCMS 安全漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. A security vulnerability exists in ChanCMS 3.1.2 and earlier versions, which originates from the incorrect operation of the function getArticle on the parameter targetUrl in the file...

OpenCart 安全漏洞

OpenCart is an open source e-commerce system by the OpenCart team in China. The system provides modules for product reviews, product ratings, and product additions. A security vulnerability exists in OpenCart version 4.1.0.4, which stems from improper blog editor input cleanup and could lead to...

Gardyn 4 操作系统命令注入漏洞

Gardyn 4 is a home vertical hydroponic growing system from Gardyn USA. A security vulnerability exists in Gardyn 4 that originates from a remote attacker being able to execute arbitrary code...

LG Innotek LNV5110R 安全漏洞

LG Innotek LNV5110R is a webcam from LG Innotek, a South Korean company. A security vulnerability exists in the LG Innotek LNV5110R that stems from an authentication vulnerability that could lead to remote code execution...