4201 matches found
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in the /system/update-run.php endpoint. The Red Hat/EUVD/NVD and related feeds confirm the same description. The root cause is a reflected or stored XSS flaw in that API endpoint, enabling injection of malicious scripts. Impact ...
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /system/update-run.php...
CVE-2025-40123
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...
CVE-2025-40116
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
EUVD-2025-176863
Malicious code in quantumfoam-run-script-troposphere-halley npm...
Malicious code in quantumfoam-run-script-troposphere-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c28a5eba8e1702bc9040b8858caf62a7744397b6b2d831244e7b07da5d7c6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176649
Malicious code in reveal-md-neptune-run-script-ignite npm...
EUVD-2025-180339
Malicious code in arcturus-run-script-hydrogeology-gatsby npm...
EUVD-2025-176583
Malicious code in run-script-sagitta-pulsar-alphard npm...
EUVD-2025-176580
Malicious code in run-script-zenith-mantle-blaze npm...
EUVD-2025-175734
Malicious code in version-aquarius-run-script-nova npm...
EUVD-2025-176760
Malicious code in redshift-run-script-chai-koa npm...
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180430
Malicious code in antares-aether-run-script-pino-pretty npm...
EUVD-2025-176582
Malicious code in run-script-taphonomy-interstellarmedium-antimatter npm...
EUVD-2025-176581
Malicious code in run-script-yaml-fomalhaut-eslint-config npm...
EUVD-2025-176191
Malicious code in stream-indus-dendrochronology-run-script npm...
EUVD-2025-179353
Malicious code in delphinus-run-script-deneb-query npm...