1399 matches found
EUVD-2026-1479
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field. The JavaScript is executed whenever another user visits the Project Cost tab. Fixed in OPEXUS eCASE Audit 11.14.2.0...
CVE-2025-68874
creationtimestamp| type| source ---|---|--- 2026-01-08 10:28:33+00:00| seen| https://gist.github.com/Darkcrai86/5c5965912c633226a27ad1629df01b77 2026-01-08 10:51:06+00:00| seen| https://gist.github.com/Darkcrai86/e95e49ad41679988a60dbc54c9d690f9 2026-01-08 12:54:12+00:00| seen|...
CVE-2026-22257
creationtimestamp| type| source ---|---|--- 2026-01-08 08:04:13+00:00| published-proof-of-concept| https://github.com/salvo-rs/salvo/security/advisories/GHSA-54m3-5fxr-2f3j 2026-01-08 19:40:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwqezghqa2u 2026-01-08...
EUVD-2026-0288
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2025-204943
Malicious code in amournapraia npm...
EUVD-2025-204671
Malicious code in colorfulpacket PyPI...
EUVD-2025-204016
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-203436
WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server...
Arbitrary file write via tar traversal
Summary A crafted tar.gz passed to MLflow pyfunc extraction is unpacked with tarfile.extractall without path validation. Archive entries containing .. or absolute paths can escape the destination directory and write arbitrary files on the host. This is reachable when users supply prebuiltenvuri o...
CVE-2025-8110
creationtimestamp| type| source ---|---|--- 2025-12-10 15:07:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115695894618278419 2025-12-10 15:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nfazcxjj2g 2025-12-10 17:26:06+00:00| seen|...
CVE-2025-64156
creationtimestamp| type| source ---|---|--- 2025-12-09 18:46:30+00:00| seen| https://gist.github.com/Darkcrai86/32d86c31fb28affcca89ef34ff2489fb 2025-12-09 19:11:25+00:00| seen| https://gist.github.com/Darkcrai86/4806712bee6f08cd7da8a8819e219d5d...
CVE-2025-14195
creationtimestamp| type| source ---|---|--- 2025-12-07 19:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7gaua6bn32w...
CVE-2025-13360
creationtimestamp| type| source ---|---|--- 2025-12-05 09:24:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7a64alhdh2w...
EUVD-2025-200206
Malicious code in data-xabit npm...
Vulnerabilities fixed in GitLab
GitLab has fixed vulnerabilities in its Community Edition CE and Enterprise Edition EE versions. The vulnerabilities include the ability for unauthenticated users to cause Denial of Service DoS conditions by submitting malicious JSON requests. In addition, unauthenticated users could join arbitra...
EUVD-2025-199171
Malicious code in create-kinvey-flex-service npm...
EUVD-2025-198914
Malicious code in @postman/secret-scanner-wasm npm...
EUVD-2025-177077
Malicious code in prettier-meteor-mineralogy-vuepress npm...