946 matches found
EUVD-2023-2994
Malicious code in bioql PyPI...
EUVD-2022-28164
Malicious code in bioql PyPI...
EUVD-2025-3505
Malicious code in bioql PyPI...
EUVD-2022-2407
Malicious code in bioql PyPI...
PT-2025-39340
CVE-2025-00456 UNDER DEVELOPMENT - USE AT YOUR OWN RISK!!! Enhanced Incident Summary Report Executive Summary On September 18, 2025, a medium-severity incident Risk Score https://t.co/DGZmVvA9zF...
SUSE-SU-2025:20721-1 Security update for git
This update for git fixes the following issues: - Update to 2.51.0 - UI, Workflows & Features - Userdiff patterns for the R language have been added. - Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. - "git cat-file --batch" learns to...
Security update for git
This update for git fixes the following issues: Update to 2.51.0 UI, Workflows & Features Userdiff patterns for the R language have been added. Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. "git cat-file --batch" learns to understand...
Linux Distros Unpatched Vulnerability : CVE-2017-7298
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.2.2+, there is XSS in the Course summary filter of the Add a new course page, as demonstrated by a crafted attribute of an SVG element. CVE-2017-729...
Linux Distros Unpatched Vulnerability : CVE-2023-5551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. CVE-2023-5551 Note that Nessus...
CVE-2025-50977
A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...
CVE-2025-50977
A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...
CVE-2025-50977
A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...
PT-2025-34902 · Wicket · Wicket
Name of the Vulnerable Software and Affected Versions: versions prior to 1.7.1 Description: A template injection vulnerability leading to reflected cross-site scripting XSS has been identified, requiring authenticated admin access for exploitation. The vulnerability exists in the r parameter and...
CVE-2025-50977: Improper Neutralization of Input During Web Page Generation
A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...
CVE-2025-50977
A template injection vulnerability in Gitblit version 1.7.1 allows authenticated administrators to execute arbitrary client-side code via reflected cross-site scripting (XSS) . The flaw originates from improper handling of the 'r' parameter , where attackers can inject malicious Angular expressio...
Malicious code in @espace-client-axafr/savings-summary-card (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41897 Malicious code in @espace-client-axafr/savings-summary-card (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in symphony-summary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...