CVE-2025-59819 Authenticated Arbitrary File Read via filepath parameter

This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path...

PT-2026-21002

This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001820 advisory. The dofollowlink function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, whi...

CVE-2025-40605: Relative Path Traversal

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences such as ../ and may access files and directories outside the intended restricted path...

CVE-2025-63695

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php...

EUVD-2025-198056

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to the protocDigest parameter being ignored when the protoc executable is sourced from the system PATH. An attacker can bypass integrity verification by placing a malicious protoc binary...

EUVD-2025-34251

Argo Workflow has a Zipslip Vulnerability...

EUVD-2011-3724

Malware in sbrugna...

EUVD-2018-13846

Malware in sbrugna...

EUVD-2021-1820

Malware in sbrugna...

EUVD-2021-1807

Malware in sbrugna...

EUVD-2007-2436

Malware in sbrugna...

EUVD-2025-15191

Malicious code in bioql PyPI...

EUVD-2022-31083

Malicious code in bioql PyPI...

EUVD-2022-27674

Malicious code in bioql PyPI...

CVE-2025-11069

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...

CVE-2025-11068

The CVE-2025-11068 entry affects westboy CicadasCMS 1.0, with the vulnerability located in the unknown functionality of /system/cms/category/save. The manipulation of the categoryName parameter results in cross-site scripting (XSS) that can be exploited remotely. Public exploit material exists, i...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developer in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter Name by the component Add...

PT-2025-39732

Name of the Vulnerable Software and Affected Versions westboy CicadasCMS version 1.0 Description A flaw exists in westboy CicadasCMS version 1.0 related to the Add Department Handler component. The issue stems from manipulating the Name argument within the /system/org/save file, leading to cross...