4712 matches found
EUVD-2025-52902
Malicious code in organic-aqua-asp npm...
EUVD-2025-53319
Malicious code in mathematical-tomato-asp npm...
EUVD-2025-51906
Malicious code in sparkling-apricot-asp npm...
Malicious code in ridiculous-turquoise-asp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25014e82fd77f7ab29f91f9820fcca039894d8761640a40714c1de1075e43d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52265
Malicious code in ridiculous-turquoise-asp npm...
EUVD-2025-52001
Malicious code in skinny-blue-asp npm...
EUVD-2025-54500
Malicious code in excited-red-asp npm...
EUVD-2025-51544
Malicious code in thick-sapphire-asp npm...
EUVD-2025-54600
Malicious code in entire-indigo-asp npm...
EUVD-2025-53247
Malicious code in minimum-brown-asp npm...
EUVD-2025-51088
Malicious code in whispering-aqua-asp npm...
MAL-2025-67544 Malicious code in critical-blush-asp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6548cbc44347102c96058b1f1e8f44b997c1fb933cfa099da75e203569d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
ROS-20251105-07
The vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Exploitation...
About the security content of macOS Sonoma 14.8.2
About the security content of macOS Sonoma 14.8.2 This document describes the security content of macOS Sonoma 14.8.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
BIT-ASPNET-CORE-2025-55315 ASP.NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
HTTP Request Smuggling
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation ...
