9523 matches found
BIT-PARSE-2025-64430 Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions 4.2.0 through 7.5.3, and 8.0.0 through 8.4.0, there is a Server-Side Request Forgery SSRF vulnerability in the file upload functionality when trying to upload a Parse.File with uri...
kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...
kernel: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data The MT7921 driver no longer uses eeprom.data, but the relevant code has not been removed completely since commit 16d98b548365 "mt76: mt7921: rely on...
EUVD-2025-121877
Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120817
Malicious code in venus-figures-configstore-dotenv-parse-variables npm...
EUVD-2025-120445
Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
EUVD-2025-121616
Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...
EUVD-2025-112977
Malicious code in halley-dotenv-parse-variables-hermes-promise npm...
EUVD-2025-123326
Malicious code in procyon-hyperion-dotenv-parse-variables-blaze npm...
EUVD-2025-114397
Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...
Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123825
Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...
EUVD-2025-112285
Malicious code in janus-private-phoebe-dotenv-parse-variables npm...
EUVD-2025-124202
Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...
EUVD-2025-111876
Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...