13073 matches found
MINI-GGWF-XC87-JQ5V
Bulletin has no description...
CVE-2025-6918 SQLi in Ncvav's Virtual PBX Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...
MINI-3CGQ-W4X4-G3W9
Bulletin has no description...
MINI-VPJQ-WPQ4-CMF3
Bulletin has no description...
MINI-3J55-4WVX-94XR
Bulletin has no description...
CVE-2025-8267
Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 Multicast as invalid. This oversight allows attackers to craf...
ALSA-2025:11992 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
MINI-8X5V-RR3G-MGVW
Bulletin has no description...
MINI-5JJC-JH3C-JWMJ
Bulletin has no description...
MINI-35QC-7XG8-99GG
Bulletin has no description...
MINI-QGRJ-2F6X-9963
Bulletin has no description...
MINI-6XCF-6QG8-RPCV
Bulletin has no description...
MINI-37G9-JCVF-8JV8
Bulletin has no description...
MINI-9WM6-V86R-J2P4
Bulletin has no description...
MINI-9W44-862C-GC38
Bulletin has no description...
GHSA-6V92-R5MX-H5FX smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution RCE. The vulnerability stems from the localpythonexecutor.py module, which inadequately restricts Python code...
DSA-5966-1 thunderbird - security update
Bulletin has no description...
MAL-2025-6272 Malicious code in acronis-platform-configs (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6262 Malicious code in blank-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2f49c661af4e850b4d2aa252c5bdfc2d7409efbbae9396ac2901d0e9fc0f910 The OpenSSF Package Analysis project identified 'blank-pkg' @ 10.0.1...