13073 matches found
MAL-2025-6315 Malicious code in teamstelemetry (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7838b0f51882af6cd99758551eec942e5c2abcd214ebe7c1e8b3c59dbece4224 The OpenSSF Package Analysis project identified 'teamstelemetry' @...
WordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Video Blogster Lite versions = 1.2...
CGA-JRQ2-5GWM-H946
Bulletin has no description...
SQL Injection
github.com/uptrace/bun is vulnerable to SQL injection. The vulnerability is due to improper handling of SQL arguments in the appendArg function in /pgdriver/format.go, which allows an attacker to inject arbitrary SQL commands...
BELL-CVE-2025-38352
Bulletin has no description...
CVE-2025-54453
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...
MAL-2025-6269 Malicious code in @wptv/player (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6295 Malicious code in mv-fe-scss (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1a1d9e0905804668e279f144472abeac638dc18ec3c4cdf519de71d9ddbe73 Any computer that has this package installed or running should be considered...
PT-2025-30554
Name of the Vulnerable Software and Affected Versions Invision Community versions prior to 4.7.20 Description The Invision Community software contains a SQL injection issue in the calendar/view.php file. The vulnerability resides in the IPScalendarmodulesfrontcalendarview::search method, where us...
CGA-C44C-87GQ-886C
Bulletin has no description...
WordPress Social Streams plugin <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin Social Streams versions = 1.0.1...
CVE-2025-54140 pyLoad has Path Traversal Vulnerability in json/upload Endpoint that allows Arbitrary File Write
pyLoad is a free and open-source Download Manager written in pure Python. In version 0.5.0b3.dev89, an authenticated path traversal vulnerability exists in the /json/upload endpoint of pyLoad. By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload...
CVE-2025-54138 LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. LibreNMS versions 25.6.0 and below contain an architectural vulnerability in the ajaxform.php endpoint that permits Remote File Inclusion base...
CVE-2025-8032
XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...
MINI-Q72F-W726-J258
Bulletin has no description...
MINI-Q6RF-3HWF-298H
Bulletin has no description...
MINI-J745-XHQ4-JVP5
Bulletin has no description...
MINI-HH8M-MV85-H7WW
Bulletin has no description...