Latest Security Threats

Cross-Site Request Forgery in Mist Community Edition

Cross-site Scripting Vulnerability in Mist Community Edition

Cross Site Scripting vulnerability in Mist Community Edition up to 4.7.1

Cross-Site Scripting (XSS) vulnerability in juzaweb CMS

SQL injection vulnerability in JeeWMS, Medium Severity

Improper Access Control vulnerability in JeeWMS

Critical SQL injection vulnerability found in JeeWMS

Improper access controls in JeeWMS.

Critical vulnerability found in JeeWMS leading to improper access controls

Mist Community Edition up to 4.7.1 improper access controls vulnerability

Buffer overflow vulnerability found in H3C GR-5400AX in the EditWlanMacList function

Critical vulnerability in H3C SecCenter SMP-E1114P02 up to 20250513 causing path traversal.

Path traversal vulnerability in H3C SecCenter SMP-E1114P02 file downloadSoftware

Vulnerability in H3C SecCenter SMP-E1114P02 allowing path traversal

Path Traversal vulnerability discovered in H3C SecCenter SMP-E1114P02

Unauthenticated SQL injection vulnerability in Likes and Dislikes Plugin plugin for WordPress

Critical vulnerability in FreeFloat FTP Server 1.0.0

Stack-based buffer overflow in SourceCodester Computer Store 1.0

SQL Injection vulnerability in Campcodes Online Hospital Management System 1.0.

Vulnerability in SourceCodester Client Database Management System 1.0 allowing unrestricted file upload

Path traversal vulnerability in chshcms mccms 2.7

Critical vulnerability in FreeFloat FTP Server 1.0 leading to buffer overflow

Buffer overflow vulnerability in PCMan FTP Server 2.0.7's NLST Command Handler

SQL Injection in 1000 Projects Online Notice Board 1.0

Unauthorized Access to Private Personal Information in Devolutions Remote Desktop Manager

SQL injection vulnerability in Campcodes Online Shopping Portal 1.0

Critical vulnerability found in Tenda FH451 1.0.0.9 leading to stack-based buffer overflow.

Critical vulnerability in Campcodes Cybercafe Management System

Buffer overflow vulnerability in FreeFloat FTP Server 1.0

Critical vulnerability found in FreeFloat FTP Server 1.0 TYPE Command Handler component causing buffer overflow.

Buffer overflow vulnerability in FreeFloat FTP Server 1.0

Vulnerability in easysoft zentaopms 21.5_20250307

Emlog Pro 2.5.11 SQL Injection Vulnerability

Cross site scripting vulnerability in Tmall Demo Search Box

A vulnerability found in Tmall Demo leading to cross site scripting.

Remote Cross Site Scripting vulnerability in Tmall Demo software

Problematic vulnerability in Tmall Demo

Critical vulnerability in DedeCMS 5.7.117 causing code injection

SQL Injection in Campcodes Online Shopping Portal 1.0

SQL Injection vulnerability in Campcodes Online Shopping Portal 1.0

Unrestricted upload vulnerability in Campcodes Online Shopping Portal 1.0

Critical vulnerability in Campcodes Online Shopping Portal 1.0 leading to sql injection

SQL Injection Vulnerability in Campcodes Online Shopping Portal 1.0

Vulnerability in Part-DB up to 1.17.0 leads to cross site scripting

SQL Injection flaw in projectworlds Online Time Table Generator 1.0

Cross Site Scripting vulnerability in moonlightL hexo-boot 4.3.0

Problematic vulnerability in moonlightL hexo-boot 4.3.0 leading to cross site scripting.

Buffer overflow vulnerability in FreeFloat FTP Server 1.0 LS Command Handler.

Critical vulnerability in FreeFloat FTP Server 1.0 leading to buffer overflow

Problematic vulnerability found in D-Link DI-7003GV2 24.04.18D1 R(68125)

Out-of-bounds read or write vulnerability in JavaScript Promise object in Firefox.

Vulnerability related to out-of-bounds read or write on a JavaScript object in Firefox.

SQL Injection vulnerability in Daily College Class Work Report Book 1.0

SQL Injection vulnerability in PHPGurukul Credit Card Application Management System 1.0

Integer overflow vulnerability in libsoup HTTP library's cookie parsing logic

Denial of Service risk in the libsoup HTTP library

Privilege escalation vulnerability in Broadcom Automic Automation Agent Unix

SQL Injection Vulnerability in Campcodes Online Shopping Portal 1.0

Zulip "Who can create public channels" access control mechanism flawed in version 10.0 - 10.2

Authenticated user can access sensitive data via /api/v1/settings endpoint

HttpAuth plugin in pGina.Fork allows authentication bypass

Pathname under the current working directory is not ensured in DOMPurify before 6bc6d60

XSS vulnerability in Lila (for Lichess)

Cross-Site Request Forgery (CSRF) vulnerability in sidngr Import Export For WooCommerce

Cross-Site Request Forgery (CSRF) vulnerability with Stored XSS effect in Michael Lups SEO Flow by LupsOnline

Integer and buffer overflow in libavif before 1.3.0

Integer overflow vulnerability in libavif before 1.3.0

Incorrect call leading to a heap-based buffer over-read in GNU PSPP

In PEAR HTTP_Request2 before 2.7.0, multiple files in the tests directory, notably tests/_network/getparameters.php and tests/_network/postparameters.php, refle...

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries....

Heap-based buffer overflow vulnerability in GNU PSPP through 2.0.1

Heap-based buffer overflow in libpspp-core.a in GNU PSPP through 2.0.1

Out-of-Bounds Read in GNU PSPP

BlueWave Checkmate versions prior to 2.0.2 allows profile edit request to include a role parameter.

Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.

Varnish Cache allows client-side desync via HTTP/1 requests

Brief description of the article