7282 matches found
Web-Vulnerability-Scanner
Web Application Vulnerability Scanner Internship Task - 2...
CVE-2025-57624
CVE-2025-57624 is a DLL hijacking vulnerability in CYRISMA Agent prior to version 444 that enables local privilege escalation and arbitrary code execution via multiple DLLs. The CVSS vector indicates a LOCAL attack with LOW attack complexity, requiring LOW privileges and no user interaction, with...
ysoserial
This is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, called ysoserial, is a collection of utilities and property-oriented programming "gadget chains" discovered in common Java libraries that can, under the right conditions, exploit Jav...
Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-22097 DESCRIPTION: In the Linux kernel, the following vulnerability has...
Linux Distros Unpatched Vulnerability : CVE-2024-55503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. CVE-2024-55503...
Linux Distros Unpatched Vulnerability : CVE-2024-8207
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a...
Malicious code in @corp-ais/mychannel-shared-libs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f0e8cfbe80a4f93fca6e505e8d783eb28bae0448cb594f0affede6c773532f Any computer that has this package installed or running should be considered...
18 Popular Code Packages Hacked, Rigged to Steal Crypto
At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in maintaining the projects was phished. The attack appears to have been quickly contained and was...
Amazon Linux 2023 : cairo, cairo-devel, cairo-gobject (ALAS2023-2025-1172)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1172 advisory. An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory...
Malicious code in test-kiota-typescript-libraries (npm)
The package test-kiota-typescript-libraries was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46257 Malicious code in test-kiota-typescript-libraries (npm)
The package test-kiota-typescript-libraries was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
[SECURITY] Fedora 41 Update: udisks2-2.10.2-1.fc41
The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies...
CVE-2025-41050
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/baselibs...
Memory exhaustion in multipart form parsing in net/textproto and net/http
...
Revisiting Third-Party Library Detection: a Ground Truth Dataset and Its Implications across Security Tasks
Accurate detection of third-party libraries TPLs is fundamental to Android security, supporting vulnerability tracking, malware detection, and supply chain auditing. Despite many proposed tools, their real-world effectiveness remains unclear.We present the first large-scale empirical study of ten...
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
...
Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers
Cybersecurity researchers have discovered two new malicious packages on the npm registry that make use of smart contracts for the Ethereum blockchain to carry out malicious actions on compromised systems, signaling the trend of threat actors constantly on the lookout for new ways to distribute...
Linux Distros Unpatched Vulnerability : CVE-2022-2986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk. CVE-2022-2986 Note that Nessus relies on the presence...
