4836 matches found
MAL-2025-19638 Malicious code in emulate-slow-execute-try-small (npm)
The package emulate-slow-execute-try-small was found to contain malicious code...
MAL-2025-32202 Malicious code in rho-rho-runtime-small-root (npm)
The package rho-rho-runtime-small-root was found to contain malicious code...
MAL-2025-33443 Malicious code in small-psi-unix-execute-report (npm)
The package small-psi-unix-execute-report was found to contain malicious code...
MAL-2025-32889 Malicious code in sed-new-protected-signal-small (npm)
The package sed-new-protected-signal-small was found to contain malicious code...
USN-7685-5: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...
Enhance the Machine Learning Algorithm Performance in Phishing Detection with Keyword Features
Recently, we can observe a significant increase of the phishing attacks in the Internet. In a typical phishing attack, the attacker sets up a malicious website that looks similar to the legitimate website in order to obtain the end-users' information. This may cause the leakage of the sensitive...
Linux Distros Unpatched Vulnerability : CVE-2021-45486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. CVE-2021-45486 Note...
Linux Distros Unpatched Vulnerability : CVE-2025-7396
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C...
BIT-LIBPHP-2023-0568 Array overrun in common path resolve code
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value,...
scsi: megaraid_sas: Fix invalid node index
...
USN-7685-3 linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...
PT-2025-31143 · Phpgurukul · Phpgurukul Small Crm
Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: Improper session invalidation in the /crm/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Update to a newer version that contains a fix for...
CVE-2025-50484
PHPGurukul Small CRM v3.0 is affected by an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The CVE-2025-50484 description consistently cites this issue across multiple sources. The vulnerability arises from failure to terminate sessions proper...
UBUNTU-CVE-2025-7396
In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519...
From Backup to Cyber Resilience: Why IT Leaders Must Rethink Backup in the Age of Ransomware
With IT outages and disruptions escalating, IT teams are shifting their focus beyond simply backing up data to maintaining operations during an incident. One of the key drivers behind this shift is the growing threat of ransomware, which continues to evolve in both frequency and complexity...
Panda Security多款产品 代码问题漏洞
Panda Security Antivirus and others are products of the Spanish company Panda Security.Panda Security Antivirus is a suite of antivirus programs.Panda Security Internet Security is a suite of cloud-based antivirus programs. Panda Security Free Antivirus is a free antivirus program. A security...