Linux Distros Unpatched Vulnerability : CVE-2012-2123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The capbprmsetcreds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities aka fcaps for...

CVE-2025-1889

CVE-2025-1889 involves the Python tool picklescan, where versions before 0.0.22 only consider standard pickle file extensions for scans. An attacker can embed a malicious pickle with a non‑standard extension inside a model or archive, bypassing detection and potentially enabling remote code execu...

MAL-2025-2042 Malicious code in jfrog-docker-desktop-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2db670bc2926b7aa07755c4117f98356231c45c33e8855fdd90de133d0e2e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.16, which stems from the fact that an unauthenticated user can cause the server to become unresponsive through a large number of requests...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

Eastnets PaymentSafe 安全漏洞

Eastnets PaymentSafe is a fast gpi payment screening solution from Eastnets UAE that detects and prevents fraud in real time. A security vulnerability exists in Eastnets PaymentSafe version 2.5.26.0 that stems from improper authorization and could lead to remote code execution...

hrms 安全漏洞

hrms is a human resource management system from BoringError Individual Developers. A security vulnerability exists in hrms 1.0.1 and prior versions that stems from improper authorization and could lead to remote code execution...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and earlier versions, which stems from improper handling of the file parameter in the /resolve file, resulting in unlimited uploads...

MAL-2025-1621 Malicious code in pp-react-content-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8280f253e75704177d57797625fe0d81836b0ae85c09ebbc58cdbec1b2a5b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1618 Malicious code in package_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ede61665484ec6970f2d593a4363c19f20c93d1691ce47bbf4f7e6e1a8f3ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exclusivemaximum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b28fe33236dabb7e672c7d6631b98bcd819bdd60b4a37d140ea7b78fe613591 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1605 Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from an insecure file retrieval process that could lead to file manipulation, impacting product stability and data...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from the potential to lead to the disclosure of cross-user personally identifiable and health information...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from the exposure of development environment details that could lead to unsafe functionality...

51Job 安全漏洞

51Job is a job site from China's MileagePlus 51Job company. A security vulnerability exists in 51Job version 14.22.0, which originates from a specially crafted link that can access sensitive user information...

MUCFC Merchants Union Finance 安全漏洞

MUCFC Merchants Union Finance MUCFC is a credit loan installment borrowing platform from China Merchants Union MUCFC Corporation. A security vulnerability exists in MUCFC Merchants Union Finance iOS version 6.19.0, which originates from a specially crafted link that can access sensitive user...

SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud, which stems from an insecure...

SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud, which stems from an insecure...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that stems from a filter that is not adequately cleaned, resulting in arbitrary fil...