12958 matches found
Mozilla -- stack memory read
[email protected] reports: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function...
CGA-47FG-FFMV-48MR
Bulletin has no description...
CVE-2025-1449 Admin Shell Access Vulnerability in Rockwell Automation Verve Asset Manager
A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion of the administrative web interface for Verve's Legacy Agentless Device Inventory ADI capability deprecated since the 1.36 release allows users to change a variable with...
CVE-2025-3021 Path Traversal vulnerability in e-management of e-solutions
Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...
KubeSphere 3.4.0 Insecure Direct Object Reference
KubeSphere version 3.4.0 and KubeSphere Enterprise version 4.1.1 suffer from an insecure direct object reference vulnerability. Exploit Title: IDOR Vulnerability in KubeSphere v3.4.0 & KubeSphere Enterprise v4.1.1 Date: 3 September Exploit Author: Okan Kurtulus Vendor Homepage:...
PT-2025-13803
Name of the Vulnerable Software and Affected Versions Xorcom CompletePBX versions prior to 5.2.35 Description The issue affects the Diagnostics reporting module, allowing for path traversal. This enables the reading of arbitrary files and the deletion of any retrieved file in place of the expecte...
CVE-2025-1734
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when receiving headers from HTTP server, the headers missing a colon : are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers...
PT-2025-13619 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against...
Malicious code in slide-tc (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2980 Malicious code in omnigodz-random (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2965 Malicious code in flaskignoressl (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tapbit-main (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stormapptest2134 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2897 Malicious code in stormapptest213 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2882 Malicious code in hibt-internal (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in coincheck-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2849 Malicious code in bitrue-main (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2841 Malicious code in azbit-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2809 Malicious code in @domons/test123 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2765 Malicious code in identitydocumentserv-multipart-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12bb417a686521f10c52162e16092d476b65d6b7679c76facfaa4655d2583908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...