Lucene search
+L

23 matches found

osv_mal
osv_mal
•added 2026/10/19 3:36 p.m.•11 views

MAL-2026-18023 Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/19 3:36 p.m.•12 views

Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/10/19 3:36 p.m.•10 views

Malware in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•4 views

Malicious Package

Overview mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.9AI score
SaveExploits0References2
Circl
Circl
•added 2026/07/13 5:11 p.m.•26 views

CVE-2024-27091

creationtimestamp| type| source ---|---|--- 2026-07-13 17:11:49+00:00| seen| https://gist.github.com/alon710/1cf437e22a892172012205a9b0e24d57...

6.1CVSS6.3AI score0.00379EPSS
SaveExploits0References1
Circl
Circl
•added 2026/03/19 7:57 a.m.•19 views

CVE-2026-27091

creationtimestamp| type| source ---|---|--- 2026-03-19 07:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfjp3qqt22y...

6.3CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/19 6:48 a.m.•11 views

CVE-2026-27091 WordPress UiPress lite plugin <= 3.5.09 - Broken Access Control vulnerability

Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiPress lite: from n/a through = 3.5.09...

6.3CVSS6AI score0.0016EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/07/08 12:00 a.m.•8 views

GLSA-202507-06 : openh264: Heap Overflow

The remote host is affected by the vulnerability described in GLSA-202507-06 openh264: Heap Overflow A vulnerability has been discovered in openh264. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linu...

8.6CVSS7.2AI score0.00687EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 2:26 a.m.•19 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.2CVSS7.1AI score0.00702EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2025-27091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could...

8.6CVSS7.6AI score0.00687EPSS
SaveExploits0References2
Debian
Debian
•added 2025/02/26 9:54 p.m.•82 views

[SECURITY] [DSA 5870-1] openh264 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5870-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 26, 2025 https://www.debian.org/security/faq -...

8.6CVSS7.5AI score0.00687EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/22 6:23 p.m.•13 views

CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

8.3CVSS7.6AI score0.00687EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/02/20 5:50 p.m.•14 views

CVE-2025-27091 OpenH264 Decoding Functions Heap Overflow Vulnerability

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

8.6CVSS7.6AI score0.00687EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/20 5:50 p.m.•21 views

CVE-2025-27091

OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence...

8.6CVSS7.6AI score0.00687EPSS
SaveExploits0
Circl
Circl
•added 2023/04/04 10:25 p.m.•21 views

CVE-2023-27091

creationtimestamp| type| source ---|---|--- 2023-04-04 22:25:48+00:00| seen| https://t.me/cibsecurity/61421 2025-02-14 19:11:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4469...

7.2CVSS7AI score0.00702EPSS
SaveExploits1References2
CVE
CVE
•added 2023/04/04 12:00 a.m.•88 views

CVE-2023-27091

CVE-2023-27091 affects XiaoBingby TeaCMS (version 2.3.3). The connected records describe an unauthorized access issue that allows attackers to escalate privileges via the id and keywords parameters. The vulnerability is evidenced across multiple sources (NVD, Red Hat, PRion, CNNVD, PT-SEC) with t...

7.2CVSS7AI score0.00702EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•48 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.3AI score0.00702EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/04/04 12:00 a.m.•17 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.1AI score0.00702EPSS
SaveExploits1References2
Circl
Circl
•added 2021/04/15 6:06 a.m.•22 views

CVE-2021-27091

creationtimestamp| type| source ---|---|--- 2021-04-15 06:06:29+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus11/21...

7.8CVSS5.7AI score0.00556EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/13 8:15 p.m.•20 views

CVE-2021-27091

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability...

7.8CVSS0.00556EPSS
SaveExploits0References1
Rows per page
Query Builder