13073 matches found
MAL-2025-4442 Malicious code in mx-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53bb09097c08dbb2935066fba5cd1b4bb5c50abd404864db6bb6c1119dfdad7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4443 Malicious code in mxc-jsbridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a080d6fa2cab7be94e152a7b621f7fd9d0ce62e7a726343e61bfbdf9e676e427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-22923 · Unknown · Summer Pearl Group Vacation Rental Management Platform
Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform version 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown part of the file /spgpm/updateListing. The...
Deserialization Of Untrusted Data
transformers is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insufficient validation of model file inputs, which allows attackers to execute arbitrary code when a user loads a malicious file or page...
Fedora 41 : thunderbird (2025-ee55907675)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ee55907675 advisory. Update to 128.10.2 https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/ ---- Update to 128.10.1...
CVE-2025-48378 Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inline
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, uploaded SVG files could contain scripts and if rendered inline those scripts could run allowing XSS attacks. Version 9.13.9 fixes the issue...
GO-2025-3690 SeaweedFS Vulnerable to SQL Injection in github.com/seaweedfs/seaweedfs
SeaweedFS Vulnerable to SQL Injection in github.com/seaweedfs/seaweedfs...
GO-2025-3697 Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management
Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation in github.com/gardener/external-dns-management...
CGA-X238-2V8W-3J6M
Bulletin has no description...
CVE-2024-32805
Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5...
CVE-2024-30539
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7...
CVE-2024-44867
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php...
CGA-5G26-7VMV-85M5
Bulletin has no description...
CVE-2024-24710
Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0...
CVE-2024-28950
Uncontrolled search path for some IntelR oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-25395
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-46974
Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers...
CVE-2024-56229
Cross-Site Request Forgery CSRF vulnerability in SearchIQ SearchIQ searchiq.This issue affects SearchIQ: from n/a through = 4.6...