Lucene search
+L

55 matches found

osv_mal
osv_mal
•added 2026/10/19 3:36 p.m.•10 views

MAL-2026-17978 Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f1e5668671737200f04c32c3b6cf14f89bfaa49d9278428a705b65ff74d572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/19 3:36 p.m.•11 views

Malicious code in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f1e5668671737200f04c32c3b6cf14f89bfaa49d9278428a705b65ff74d572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/10/19 3:36 p.m.•10 views

Malware in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•6 views

Malicious Package

Overview avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

9.8CVSS5.9AI score
SaveExploits0References2
Circl
Circl
•added 2026/06/18 7:50 a.m.•33 views

CVE-2026-9815

creationtimestamp| type| source ---|---|--- 2026-06-18 07:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokdob7lp52d 2026-09-29 12:47:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

6.5CVSS5.7AI score0.00215EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2019-9815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to...

8.1CVSS8AI score0.01828EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2014-9815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service application crash via a crafted wpg file. CVE-2014-9815 Note that Nessus relies on the presence...

5.5CVSS7AI score0.01468EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2017-9815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tifdirread.c mishandles a malloc operation, which allows attackers to cause a denial of...

6.5CVSS6.5AI score0.01578EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2016-9815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort. CVE-2016-9815 Note that Nessus relie...

6.5CVSS6.8AI score0.00464EPSS
SaveExploits0References2
Circl
Circl
•added 2024/10/11 1:07 a.m.•19 views

CVE-2024-9815

creationtimestamp| type| source ---|---|--- 2024-10-11 01:07:48+00:00| seen| https://t.me/cvedetector/7639...

7.2CVSS5.3AI score0.00628EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/10 10:15 p.m.•25 views

CVE-2024-9815

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

7.2CVSS5AI score0.00628EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/10 9:31 p.m.•22 views

CVE-2024-9815 Codezips Tourist Management System create-package.php unrestricted upload

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

5.8CVSS5AI score0.00628EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•38 views

RHEL 5 : xsa201_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xsa201 xen: ARM guests may induce host asynchronous abort XSA-201 CVE-2016-9818 - Xen through 4.7.x allow...

7AI score0.00471EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:55 a.m.•13 views

SUSE CVE-2016-9815

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort...

6.5CVSS6.3AI score0.00464EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/04/21 12:00 a.m.•91 views

Slackware: Security Advisory (SSA:2019-141-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.09393EPSS
SaveExploits5References20
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•36 views

SUSE: Security Advisory (SUSE-SU-2019:1405-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.09393EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•32 views

SUSE: Security Advisory (SUSE-SU-2019:1388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.09393EPSS
SaveExploits5References4
osv_cve
osv_cve
•added 2020/06/09 5:15 p.m.•10 views

CVE-2020-9815

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution...

7.8CVSS6AI score0.01374EPSS
SaveExploits0References4
CVE
CVE
•added 2020/06/09 4:11 p.m.•136 views

CVE-2020-9815

CVE-2020-9815 affects multiple Apple platforms (iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). Description: Processing a maliciously crafted audio file may lead to arbitrary code execution due to an out-of-bounds read, addressed by improved bounds checking. Affected co...

9.3CVSS7.6AI score0.01374EPSS
SaveExploits0References4Affected Software5
RedhatCVE
RedhatCVE
•added 2020/04/02 2:08 p.m.•43 views

CVE-2019-9815

If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications running untrusted code in a thread through a new sysctl. Firefox now makes use of it on the main...

8.1CVSS1AI score0.01828EPSS
SaveExploits0References3
Rows per page
Query Builder