13120 matches found
GO-2025-3779 Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app...
GO-2025-3758 Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad
Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad...
CGA-QF7C-6346-2GF6
Bulletin has no description...
MAL-2025-6738 Malicious code in nio4r (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6780 Malicious code in wbcm (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6766 Malicious code in tdesign-flutter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6763 Malicious code in spot-tasks (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6743 Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6771 Malicious code in tidb-lightning-web (npm)
The package communicates with a domain associated with malicious activity...
CGA-6744-388X-QM8Q
Bulletin has no description...
CGA-GXCJ-JJ66-MXG7
Bulletin has no description...
MINI-RF5G-R7W9-RJ8R
Bulletin has no description...
MINI-GGWF-XC87-JQ5V
Bulletin has no description...
CVE-2025-6918 SQLi in Ncvav's Virtual PBX Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...
MINI-3CGQ-W4X4-G3W9
Bulletin has no description...
MINI-VPJQ-WPQ4-CMF3
Bulletin has no description...
MINI-3J55-4WVX-94XR
Bulletin has no description...
CVE-2025-8267
Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 Multicast as invalid. This oversight allows attackers to craf...
ALSA-2025:11992 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...