1097 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-16228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size...
Remote Code Execution (RCE)
Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to the use of torch.utils.collectenv.run in the reduce method. An attacker can execute arbitrary code by crafting...
MAL-2025-41355 Malicious code in @navify-platform/env (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
eslint-ban-moment 安全漏洞
eslint-ban-moment is an application by the individual developer Kristófer Fannar Björnsson. A security vulnerability exists in eslint-ban-moment 3.0.0 and earlier versions, which originates from the exposure of sensitive Supabase URIs in .env files, which could lead to data exfiltration,...
Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...
Malicious code in funbox-frontend-env-angular (npm)
The package funbox-frontend-env-angular was found to contain malicious code...
Malicious code in subscription-cross-env-dione-protractor (npm)
The package subscription-cross-env-dione-protractor was found to contain malicious code...
Malicious code in cross-env-wormhole-passport-regulus (npm)
The package cross-env-wormhole-passport-regulus was found to contain malicious code...
Malicious code in callback-cross-env-technosignature-ganymede (npm)
The package callback-cross-env-technosignature-ganymede was found to contain malicious code...
Malicious code in cross-env-relay-commitlint-config-angular-configstore (npm)
The package cross-env-relay-commitlint-config-angular-configstore was found to contain malicious code...
Malicious code in cross-env-xanthus-luminescence-lyra (npm)
The package cross-env-xanthus-luminescence-lyra was found to contain malicious code...
MAL-2025-17706 Malicious code in cross-env-wormhole-passport-regulus (npm)
The package cross-env-wormhole-passport-regulus was found to contain malicious code...
MAL-2025-17705 Malicious code in cross-env-volcanology-less-loader-fetch (npm)
The package cross-env-volcanology-less-loader-fetch was found to contain malicious code...
MAL-2025-15303 Malicious code in babel-preset-env-2 (npm)
The package babel-preset-env-2 was found to contain malicious code...
MAL-2025-17707 Malicious code in cross-env-xanthus-luminescence-lyra (npm)
The package cross-env-xanthus-luminescence-lyra was found to contain malicious code...
MAL-2025-17701 Malicious code in cross-env-canopus-stratosphere-local (npm)
The package cross-env-canopus-stratosphere-local was found to contain malicious code...
MAL-2025-25699 Malicious code in luster-ext-env (npm)
The package luster-ext-env was found to contain malicious code...