Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista USA. A security vulnerability exists in Arista EOS that stems from the fact that restarting the Tunnelsec agent may cause packets to be sent in plaintext through a secure Vxlan tunnel...

Malicious code in glance-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3632 Malicious code in josson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c585f748cf244fb99fd1f095a3df5fbe0d7d7112abfb274d4bcaab86a1f3607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3613 Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A security vulnerability exists in Linksys E5600 version v1.1.0.26, which stems from the runtime.ddnsStatus DynDNS function causing command injection via the username parameter...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version v1.1.0.26, which originates in the runtime.InternetConnection function leading to command injection...

Chat App Used by Trump Admin Suspends Operation Amid Hack

TM SGNL, a chat app by US-Israeli firm TeleMessage used by Trump officials, halts operations after a breach…...

mezzanine 安全漏洞

mezzanine is a Django CMS framework by stephenmcd individual developer. A security vulnerability exists in mezzanine version 6.0.0, which originates from cross-site scripting in the View Entries feature of the Forms module...

One 安全漏洞

One is a front-end and back-end separated backend management system based on Spring Boot and Vue2 developed by lcw2004 individual developer. A security vulnerability exists in One v1.0, which stems from improper access control of component/api/user/manager, which may result in accessing sensitive...

kob 安全漏洞

kob is an open source centralized job scheduling system from Ke Technologies that defines a task scheduling model and enables unified management and monitoring of task scheduling. A security vulnerability exists in kob version v1.0.0, which stems from improper access control of the doFilter...

CVE-2025-4213 PHPGurukul Online Birth Certificate System search.php sql injection

A vulnerability has been found in PHPGurukul Online Birth Certificate System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit...

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

An employee at Elon Musk's artificial intelligence company xAI leaked a private key on GitHub that for the past two months could have allowed anyone to query private xAI large language models LLMs which appear to have been custom made for working with internal data from Musk's companies, includin...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from the lack of a no cache header, which could lead to caching of sensitive data...

PT-2025-18334 · Hcl · Domino Leap +1

Name of the Vulnerable Software and Affected Versions: HCL Domino Volt and Domino Leap affected versions not specified Description: The issue is related to an insufficient URI protocol whitelist, which allows script injection through query parameters. This can potentially lead to security breache...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an inadequate cleanup policy that could lead to client-side script injection...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. A security vulnerability exists in HCL Leap, which stems from an inadequate default configuration that could lead to anonymous access to directory information...

Weitong Mall 安全漏洞

Weitong Mall 微同商城 is a shopping mall system by fuyanglipengjun, an individual developer. A security vulnerability exists in Weitong Mall version 1.0.0, which stems from an incorrect operation of the parameter isDelete resulting in improper access control...

Kyverno 安全漏洞

Kyverno is a policy engine designed for Kubernetes that is open sourced by Kyverno. A security vulnerability exists in Kyverno versions prior to 1.14.0 that stems from mishandling of namespace selector errors, which could lead to bypassing security policies...

Bookgy 安全漏洞

Bookgy is an online reservation management and booking system for all types of small and medium-sized businesses from Bookgy, Inc. A security vulnerability exists in Bookgy that stems from insufficient authorization controls and could lead to unauthenticated users accessing private areas...

YesWiki 安全漏洞

YesWiki is a wiki system written in PHP by the French organization YesWiki. It is used to create and manage websites in a collaborative manner. A security vulnerability exists in versions of YesWiki prior to 4.5.4 that originates from an arbitrary file write and could lead to remote code executio...