Ocuco Innovation 安全漏洞

Ocuco Innovation is a comprehensive Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which originates in the STOCKORDERENTRY.E...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from a modification of TCP...

TP-LINK Tapo 安全漏洞

TP-LINK Tapo is a series of secure WiFi cameras from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to 3.10.513, which stems from a low battery notification that could lead to a user of a shared device gaining full power settings access...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.13, which stems from an authentication bypass...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.17, which stems from an authentication bypass...

MAL-2025-4105 Malicious code in modules-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3599d04fe3ad9f41d62d1da7a44146ad6a523119af78f3a1b496a53bd8da6c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4069 Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a9d5a626622260968ebe26077b57efd3ec56b069d8808fe569f79523a7095a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Blizzard Battle.net 安全漏洞

Blizzard Battle.net is an online gaming platform from Blizzard USA Inc. A security vulnerability exists in Blizzard Battle.net version v2.40.0.15267, which originates from improper placement of specially crafted scripts or executables that may result in elevated privileges...

MAL-2025-4048 Malicious code in coreapi-export-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe86815fc8cb7bbb88f1deeb64b81cd4927a5d42200c02111fcf22b2bd9944a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from the possibility of bypassing password guessing...

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility. "Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience," the company said in a statement...

MAL-2025-4010 Malicious code in mp-cross (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53921b386b6a8061c81837604fae74f8719325a726df27664fb9ea723d2bbda8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4002 Malicious code in ing-feat-transaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b877e68ebd0174dd21b5f1e3afb284802ab840642a65f9ebaa5c4cc5293e5ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-21950 · Bunny.Net · Bunny.Net

Name of the Vulnerable Software and Affected Versions: bunny.net versions n/a through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This exposes users to cyber attacks and...

MAL-2025-3935 Malicious code in eslint-plugin-i18n-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f5d25719716952625ab6fabacd4ccb2743e7066584b9b76cf5c198a0ebfc66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Donetick 安全漏洞

Donetick is an open source, user-friendly application from Donetick Open Source for managing tasks and chores. A security vulnerability exists in Donetick versions prior to 0.1.44, which stems from a weak JWT signing key default that could lead to account takeover...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.8.0, which originates from improper authorization due to incorrect operation of the parameter ids in the file /monitor/online/batchForceLogout...

MAL-2025-3818 Malicious code in auth0-authz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5de2600b08c1473abec0bac3c49bbcd4fa9626350cd3eb9c2d325cda30b0381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WP ERP | Complete HR solution...

lila 安全漏洞

lila is an ad-free and open source chess server from Lichess Open Source. A security vulnerability exists in previous versions of lila ab0beaf, which stems from improper use of innerHTML in powertip.ts and could lead to cross-site scripting attacks...