29881 matches found
Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm)
The package down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr was found to contain malicious code...
Malicious code in do-wnload-available-out-of-the-game-l7no5-nzaaod (npm)
The package do-wnload-available-out-of-the-game-l7no5-nzaaod was found to contain malicious code...
Malicious code in down-load-available-songs-in-the-key-of-life-1-0w495-lciybu (npm)
The package down-load-available-songs-in-the-key-of-life-1-0w495-lciybu was found to contain malicious code...
Malicious code in the-brink-auth (npm)
The package the-brink-auth was found to contain malicious code...
MAL-2025-26788 Malicious code in mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp (npm)
The package mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp was found to contain malicious code...
MAL-2025-36775 Malicious code in the-brink-auth (npm)
The package the-brink-auth was found to contain malicious code...
MAL-2025-20545 Malicious code in file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm (npm)
The package file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm was found to contain malicious code...
Free of Memory not on the Heap
Overview Affected versions of this package are vulnerable to Free of Memory not on the Heap in the TIFFCROP utility. An attacker can cause denial of service by triggering memory corruption through crafted input files. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitLab Iss...
CVE-2025-52800
Missing Authorization vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP profitori allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects The E-Commerce ERP: from n/a through = 2.1.1.3...
CVE-2025-52800 WordPress The E-Commerce ERP <= 2.1.1.3 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects The E-Commerce ERP: from n/a through 2.1.1.3...
CVE-2024-7402
CVE-2024-7402 concerns Netskope Client where a malicious insider with administrative privileges can tamper the client configuration via a local MITM on the client-channel. Impact per available data includes temporary or permanent configuration changes and possible removal of the agent, with CVSS ...
WordPress plugin The Plus Addons for Elementor Page Builder Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin The...
WordPress plugin The E-Commerce ERP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Oracle Linux 7 : konsole (ELSA-2025-12346)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12346 advisory. 4.10.5-5.0.1 - Clear the arguments if the command is not found Orabug: 38260855CVE-2025-49091 Tenable has extracted the preceding description block directly fr...
Agentic AI: How Autonomous Agents are Changing the Game
...
ZKTeco WL20 信任管理问题漏洞
The ZKTeco WL20 is an intelligent fingerprint time and attendance machine from China's Entropy Base Technology ZKTeco. The ZKTeco WL20 suffers from a trust management issue vulnerability that stems from a hard-coded private key stored in the device firmware, which could allow a physical access...
PT-2025-32981 · Zkteco · Zkteco Wl20
Name of the Vulnerable Software and Affected Versions: ZKTeco WL20 affected versions not specified Description: The device stores a private key in plaintext within its firmware. An attacker with physical access can extract the firmware, analyze the binary data, and retrieve the private key...
CVE-2025-53148
CVE-2025-53148 affects Windows Routing and Remote Access Service (RRAS); the issue is described as an information disclosure due to use of an uninitialized resource. Connected sources confirm RRAS involvement and show that Microsoft released updates to fix Windows vulnerabilities, including RRAS-...
CVE-2024-41986
CVE-2024-41986 affects Siemens SmartClient modules used by Opcenter QL Home, SOA Audit, and SOA Cockpit. The vulnerability arises because the affected applications support insecure TLS 1.0 and 1.1, enabling possible man‑in‑the‑middle attacks that could compromise confidentiality and data integrit...
