Information Kerala Mission SANCHAYA 安全漏洞

Information Kerala Mission SANCHAYA is a web-based application of the Information Kerala Mission Government of India department through which citizens can check their tax dues. A security vulnerability exists in Information Kerala Mission SANCHAYA v3.0.4. An attacker can exploit the vulnerability...

Mage AI 安全漏洞

Mage AI is a Mage open source intelligent program for building, running and managing data pipelines. A security vulnerability exists in Mage AI version 0.9.75 that stems from insecure resource initialization...

starsea-mall 安全漏洞

starsea-mall is a springboot +thymeleaf based Xiaomi mall management system by StarSea99 individual developer. A security vulnerability exists in starsea-mall version 1.0, which stems from improper manipulation of the userId parameter, which may lead to improper access control...

Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed," c/side researcher Himanshu Anand said in ...

Malicious code in raydium-sdk-liquidity-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95803e6fbd42100c3761cfc33e6d233c5714b79d1e3b65bbe51927c9c32a0ee9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2012-2123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The capbprmsetcreds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities aka fcaps for...

Codezips Online Shopping Website 安全漏洞

Codezips Online Shopping Website is a Codezips open source online store system. A security vulnerability exists in Codezips Online Shopping Website version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

CVE-2025-1889

CVE-2025-1889 involves the Python tool picklescan, where versions before 0.0.22 only consider standard pickle file extensions for scans. An attacker can embed a malicious pickle with a non‑standard extension inside a model or archive, bypassing detection and potentially enabling remote code execu...

MAL-2025-2042 Malicious code in jfrog-docker-desktop-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2db670bc2926b7aa07755c4117f98356231c45c33e8855fdd90de133d0e2e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.16, which stems from the fact that an unauthenticated user can cause the server to become unresponsive through a large number of requests...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

hrms 安全漏洞

hrms is a human resource management system from BoringError Individual Developers. A security vulnerability exists in hrms 1.0.1 and prior versions that stems from improper authorization and could lead to remote code execution...

Eastnets PaymentSafe 安全漏洞

Eastnets PaymentSafe is a fast gpi payment screening solution from Eastnets UAE that detects and prevents fraud in real time. A security vulnerability exists in Eastnets PaymentSafe version 2.5.26.0 that stems from improper authorization and could lead to remote code execution...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and earlier versions, which stems from improper handling of the file parameter in the /resolve file, resulting in unlimited uploads...

MAL-2025-1621 Malicious code in pp-react-content-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8280f253e75704177d57797625fe0d81836b0ae85c09ebbc58cdbec1b2a5b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1618 Malicious code in package_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ede61665484ec6970f2d593a4363c19f20c93d1691ce47bbf4f7e6e1a8f3ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exclusivemaximum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b28fe33236dabb7e672c7d6631b98bcd819bdd60b4a37d140ea7b78fe613591 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1605 Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from the exposure of development environment details that could lead to unsafe functionality...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for people with chronic conditions. Dario Health has a security vulnerability that stems from the potential to lead to the disclosure of cross-user personally identifiable and health information...