9518 matches found
PT-2025-51632
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the CIFS implementation, specifically within the smb3 fs context parse param function. The issue arises when processing Opt source mount option...
CVE-2025-9501
The W3 Total Cache WordPress plugin, in versions prior to 2.8.13 , contains a command injection vulnerability within the _parse_dynamic_mfunc function. This flaw allows unauthenticated users to execute arbitrary PHP commands by submitting a comment containing a malicious payload to a post. The vu...
CVE-2025-9501 W3 Total Cache < 2.8.13 - Unauthenticated Command Injection
The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the parsedynamicmfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post...
OESA-2025-2648 golang security update
. Security Fixes: tar.Reader in the Go archive/tar component did not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions could cause a Reader to read an unbounded amount of data fr...
Improper Input Validation
github.com/nyaruka/phonenumbers is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of syntactic correctness in the phonenumbers.Parse function, which allows an attacker to provide crafted input and cause a panic resulting in a “runtime error: slice...
EUVD-2025-177037
Malicious code in process-simulate-parse-integer-wind npm...
EUVD-2025-176694
Malicious code in report-good-error-user-parse npm...
EUVD-2025-179708
Malicious code in cloud-star-parse-fork-sandbox npm...
EUVD-2025-176725
Malicious code in reject-report-water-thread-parse npm...
EUVD-2025-175781
Malicious code in upsilon-parse-module-virtualize-sandbox npm...
EUVD-2025-178183
Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176140
Malicious code in sun-serialize-parse-validate-alert npm...
EUVD-2025-179896
Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...
Malicious code in scale-parse-await-book-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf23bd6ac11aee950532e019d12d27aef2b746a2fcd39db0eafe766558432d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177320
Malicious code in parse-abstract-beta-rain-benchmark npm...
EUVD-2025-175920
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...