5946 matches found
MAL-2025-42085 Malicious code in solidity-utils-docify (npm)
The package solidity-utils-docify was found to contain malicious code...
Malicious code in d360-test-utils (npm)
The package d360-test-utils was found to contain malicious code...
CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
ROS-20250829-01
A vulnerability in the mount.cifs.c component of the CIFS network file system mount utility package cifs-utils of the Linux operating system is related to writing beyond buffer boundaries in memory. Exploitation exploitation of the vulnerability could allow an attacker to escalate his privileges...
CVE-2025-9650: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41933 Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41924 Malicious code in @rbacore/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in https-proxy-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Google Android rfc_utils.cc file memory misreference vulnerability
Google Android is a Linux-based open source operating system from Google. A memory misreference vulnerability exists in the Google Android rfcutils.cc file, which can be exploited by an attacker to execute arbitrary code on the system...
Linux Distros Unpatched Vulnerability : CVE-2022-21682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6...
CVE-2025-30040: Missing Authentication for Critical Function
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...
CVE-2025-30061: Improper Neutralization of Special Elements used in an SQL Command
In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter...
Linux Distros Unpatched Vulnerability : CVE-2019-3689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including...
MAL-2025-47794 Malicious code in py-sys-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0f9d0b03bfee3afe8585a595eb40b5bb3d9d59db389bc864641b19aadd6bb764 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
PT-2026-54006
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.28 Description The software fails to detect malicious pickle files that utilize the torch.utils.collect env.run function within reduce methods. This allows attackers to embed hidden code in pickle files, which...