Thomas Nuxt Ollama trust management issue vulnerability

Versions of Thomas Nuxt Ollama prior to 1.3.1 contain a trust management vulnerability. This vulnerability arises because src/module.ts unconditionally merges all module options—including those containing cloud API keys—into runtimeConfig.public.ollama. These public configurations are then...

CVE-1999-0392

Buffer overflow in Thomas Boutell's cgic library version up to 1.05...

A Bootiful Podcast: Apache Tomcat legend Mark Thomas (Happy new year!)

In this episode, I talk with Mark Thomas, the legendary and highly prolific committer to Apache Tomcat. Happy New Year!...

WordPress Houzez plugin <= 4.1.6 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability

Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Alex Thomas - Wordfence in WordPress Theme Houzez versions = 4.1.6...

EUVD-2025-80295

Malicious code in thomas-soluble-pot npm...

EUVD-2025-80294

Malicious code in thomas-tea-archive npm...

A Bootiful Podcast: Oracle VP and GraalVM founder Thomas Wuerthinger

Hi, Spring fans! In this installment I talk to Oracle VP and GraalVM founder Thomas Wuerthinger, recorded at Devoxx 2025!...

A Bootiful Podcast: Oracle VP and GraalVM founder Thomas Weurthinger

Hi, Spring fans! In this installment I talk to Oracle VP and GraalVM founder Thomas Weurthinger, recorded at Devoxx 2025!...

EUVD-2002-1053

Malware in sbrugna...

EUVD-1999-0392

Malware in sbrugna...

EUVD-2025-26895

Malicious code in bioql PyPI...

EUVD-2023-49383

Malicious code in bioql PyPI...

EUVD-2025-3305

Malicious code in bioql PyPI...

How Leading Security Teams Blend AI + Human Workflows (Free Webinar)

AI is changing automation—but not always for the better. That's why we're hosting a new webinar, "Workflow Clarity: Where AI Fits in Modern Automation," with Thomas Kinsella, Co-founder & Chief Customer Officer at Tines, to explore how leading teams are cutting through the hype and building...

com.github.barambani:http4s-extend_2.11 (>=0.0.24, <=0.0.32), com.github.gvolpe:http4s-tracer_2.11 (0.1) +51 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.11 (0.10.3)

co.fs2:fs2-io2.11 MAVEN version 0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on co.fs2:fs2-io2.11 and may be impacted: - com.github.barambani:http4s-extend2.11 =0.0.24, =0.11.0, =0.3, =0.1.1, =0.1.1, =0.1.1, =0.1.5, =0.0.1-m10, =0.0.1-m10,...

Exploit for Command Injection in Nikhil-Bhalerao Poultry_Farm_Management_System

CVE-2024-40110 - Poultry Farm Management System v1.0 Explo...

CVE-2025-22711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Thomas Maier Image Source Control image-source-control-isc allows Reflected XSS.This issue affects Image Source Control: from n/a through = 2.29.0...

CVE-2025-22711: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Thomas Maier Image Source Control image-source-control-isc allows Reflected XSS.This issue affects Image Source Control: from n/a through = 2.29.0...

CVE-2024-54435 WordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Onlywire Multi Autosubmitter allows Stored XSS.This issue affects Onlywire Multi Autosubmitter: from n/a through 1.2.4...

CVE-2023-32586

Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1...