CVE-2025-14712

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password...

[SECURITY] Fedora 42 Update: python3.14-3.14.2-1.fc42

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable:...

[SECURITY] Fedora 43 Update: python3.13-3.13.11-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from testkho not checking the KHO enabled status, which could lead to uninitialized data structure access...

CVE-2025-68164: Observable Discrepancy

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test...

Grafana Alerting Editors can edit destination of webhooks they did not create

In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as part of the fixed role "Contact Point Writer", which is part of the basic role Editor - can edit...

PT-2025-51715

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test...

Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect its use of the MIME4J library

Summary Due to the use of the MIME4J library, Rational Performance Tester contains vulnerabilities that could result in improper input validation. Vulnerability Details CVEID:CVE-2024-21742 DESCRIPTION: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM...

Security Bulletin: Rational Performance Tester contains a vulnerability which could effect its use of the MIME4J library

Summary Due to the use of the MIME4J library, Rational Performance Tester contains a vulnerability that could potentially allow access to sensitive data. Vulnerability Details CVEID:CVE-2022-45787 DESCRIPTION: Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvid...

org.elasticsearch.plugin:transport-netty4 (>=9.2.0, <=9.2.1), org.elasticsearch.plugin:x-pack-core (>=9.2.0, <=9.2.1) +3 more potentially affected by CVE-2025-37731 via org.elasticsearch:elasticsearch-ssl-config (>=9.2.0, <=9.2.1)

org.elasticsearch:elasticsearch-ssl-config MAVEN version =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.1 Source cves: CVE-2025-37731 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-14417579...

SUSE-SU-2025:4398-1 Security update for python3

This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on os.path.expandvars bsc1252974. - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central Directory EOCD bsc1251305. Other issues fixed:...

Malware in wfui-test-e2e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview wfui-test-e2e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-14712

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password...

CVE-2025-14712 JHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive Information

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password...

EUVD-2025-203331

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password...

CVE-2025-14712

CVE-2025-14712 affects the Student Learning Assessment and Support System developed by JHENG GAO. The vulnerability is an exposure of sensitive information that allows unauthenticated remote attackers to view a specific page and obtain test accounts and passwords. Reported across multiple feeds (...

GHSA-45H5-66JX-R2WF MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827

MJML before 5.0.0-alpha.9 allows mj-include directory traversal to test file existence and in the type="css" case read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827...

CVE-2025-14712: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password...

SUSE SLED15 / SLES15 Security Update : python-future (SUSE-SU-2025:03049-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03049-1 advisory. - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py bsc1248124 Tenable has...