EUVD-2024-29264

Malicious code in bioql PyPI...

BELL-CVE-2025-38725

Bulletin has no description...

ASB-A-419014146

Bulletin has no description...

Malicious code in minederp (npm)

The package minederp was found to contain malicious code...

Malicious code in tmnetwork (npm)

The package tmnetwork was found to contain malicious code...

Malicious code in leadconduit-whitepages (npm)

The package leadconduit-whitepages was found to contain malicious code...

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

BELL-CVE-2025-54350

Bulletin has no description...

CVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...

BELL-CVE-2025-38426

Bulletin has no description...

CVE-2025-53902 Tuleap exposes artifacts to a mentioned user via email notifications

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

BELL-CVE-2025-38491

Bulletin has no description...

BELL-CVE-2025-8176

Bulletin has no description...

CVE-2025-54453

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-4285

CVE-2025-4285 is a SQL Injection vulnerability in Rolantis Information Technologies Agentis prior to version 4.32. The issue arises from improper neutralization of special elements in SQL commands, enabling an attacker to potentially perform unauthorized database operations. Impacted software is ...

Adobe InCopy Heap Buffer Overflow Vulnerability

InCopy is a professional typesetting software from Adobe for editing and designing complex layouts. A heap buffer overflow vulnerability exists in InCopy 20.3, 19.5.3 and earlier versions. An attacker can exploit this vulnerability to cause arbitrary code to be executed in the current user contex...

MINI-JV9P-HXFP-6C68

Bulletin has no description...

BELL-CVE-2025-38193

Bulletin has no description...

BELL-CVE-2025-38131

Bulletin has no description...

GHSA-QWWM-C582-82RX Mattermost allows unauthorized channel member management through playbook runs

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public...