3718 matches found
MAL-2025-3935 Malicious code in eslint-plugin-i18n-strings (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f5d25719716952625ab6fabacd4ccb2743e7066584b9b76cf5c198a0ebfc66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Donetick 安全漏洞
Donetick is an open source, user-friendly application from Donetick Open Source for managing tasks and chores. A security vulnerability exists in Donetick versions prior to 0.1.44, which stems from a weak JWT signing key default that could lead to account takeover...
RuoYi 安全漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.8.0, which originates from improper authorization due to incorrect operation of the parameter ids in the file /monitor/online/batchForceLogout...
MAL-2025-3818 Malicious code in auth0-authz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5de2600b08c1473abec0bac3c49bbcd4fa9626350cd3eb9c2d325cda30b0381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
lila 安全漏洞
lila is an ad-free and open source chess server from Lichess Open Source. A security vulnerability exists in previous versions of lila ab0beaf, which stems from improper use of innerHTML in powertip.ts and could lead to cross-site scripting attacks...
WordPress plugin WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WP ERP | Complete HR solution...
Anonymous Hackers Steal Flight Data from US Deportation Airline GlobalX
A hacker group claiming affiliation with Anonymous says it breached GlobalX Airlines, leaking sensitive flight and passenger data…...
Pagure 安全漏洞
Pagure is a Pagure open source Git repository written in Python that provides web services. A security vulnerability exists in the Pagure server that originates from a malicious user committing a specially crafted git repository, which could lead to the disclosure of sensitive information on the...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from an application that may access sensitive user data...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from an application that may access sensitive user data...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient input cleanup, which could lead to applications gaining elevated privileges...
Apple macOS 安全漏洞
Apple macOS is a set of specialized operating systems developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS that stems from a sandboxed application that may access sensitive user data...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple USA. A security vulnerability exists in Apple macOS that stems from an insufficient check that could cause an application to bypass ASLR...
WormHole Tech GPM 安全漏洞
WormHole Tech GPM is an enterprise-grade project portfolio management platform that integrates Agile development and DevOps toolchain from China-based WormHole Tech. A security vulnerability exists in WormHole Tech GPM that stems from unauthenticated password changes, which could lead to an...
Schweitzer Engineering Laboratories SEL Series 安全漏洞
Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in Schweitzer Engineering Laboratories SEL Series that originates from a user with non-user administrative privileges being...
hotel 安全漏洞
hotel is a hotel management system developed by muamua individual developer based on SpringBoot. A security vulnerability exists in hotel 1.2 and earlier versions, which stems from a loose cross-domain policy due to misuse of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java...
Code-Projects Simple Banking System 安全漏洞
Code-Projects Simple Banking System is a simple banking system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Banking System version 1.0 and earlier, which originates from a buffer overflow due to a parameter password2 operation in the Sign In component...
Legacy Login in Microsoft Entra ID Exploited to Breach Cloud Accounts
A flaw in Microsoft Entra ID’s legacy login allowed attackers to bypass MFA, targeting admin accounts across finance,…...
Jan 安全漏洞
Jan is an open source replacement for ChatGPT by Jan Open Source. A security vulnerability exists in Jan 0.5.14 and earlier versions, which originates from a remote code execution that may be triggered when a user clicks on a link rendered in a session...
