13073 matches found
CVE-2025-53096 Sunshine clickjacking in the UI leads to unauthorized actions being performed
Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website using an invisible or disguised iframe. ...
Electron vulnerable to Heap Buffer Overflow in NativeImage
Impact The nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap buffer overflow. An Electron program that uses either of the affected functions is vulnerable to a buffer overflow if an attacker is in control of the image's...
CVE-2025-52898 Frappe account takeover via password reset token leakage
Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request could lead to a malicious actor getting access to a user's password reset token. This can only be exploited on self hosted instances configured in a certain way. Frappe Cloud users...
MAL-2025-5340 Malicious code in datanerd (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e27cc5b384d5f579c6bb715b63787b1c01c0dea212e824f44db6e5fe99b824d5 Any computer that has this package installed or running should be considered...
CGA-W825-836W-2W9G
Bulletin has no description...
MINI-R487-49Q9-X8C2
Bulletin has no description...
MAL-2025-5469 Malicious code in trace-mapping (npm)
The package communicates with a domain associated with malicious activity...
PT-2025-27384 · Sourcecodester · Sourcecodester Simple Company Website
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Company Website version 1.0 Description: A critical issue was found in the software, affecting the file /classes/SystemSettings.php. The manipulation of the img argument leads to unrestricted upload. This issue can be...
Apache Seata Vulnerable to Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata incubating: from 2.0.0 before 2.3.0. The Apache...
CGA-X8WQ-H8W3-JCXR
Bulletin has no description...
CGA-JX6J-48FV-F5CC
Bulletin has no description...
CGA-6879-9559-49M6
Bulletin has no description...
CGA-F4MC-HJFP-GV4F
Bulletin has no description...
CGA-G28F-C29M-HW2P
Bulletin has no description...
CGA-6Q3C-677F-4HJW
Bulletin has no description...
CGA-5827-JWRM-49QJ
Bulletin has no description...
CGA-3F66-JC99-Q55C
Bulletin has no description...
CGA-244V-RJ3J-2X42
Bulletin has no description...