10946 matches found
ASB-A-407764858
In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...
ASB-A-392614489
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-388032224
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Malicious code in berachain-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44aebab0bbbd5111085070765f75cb2a7863bb8c97a276b96596f69a2062d10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-41820 Malicious code in openmct-e2e (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 929c26f533affbdfe0c09be2dff86f393cae1b379f25ce110aa61a1a27f473fb The OpenSSF Package Analysis project identified 'openmct-e2e' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2025-7426
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of...
MAL-2025-41819 Malicious code in @hpx-core-experiences/react-my-account-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07356e94cbef647858d04baaf3188c3c72ea8ba194c69b6000d0674ccaa1ac71 The OpenSSF Package Analysis project identified '@hpx-core-experiences/react-my-account-commons' @ 11.0.1 npm as malicious. It is considered...
Malicious code in test343tttt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a83c7be6d241a79ccd6f23880afa83b749ac59232786eaab03a62b2512c9b7 The OpenSSF Package Analysis project identified 'test343tttt' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...
Linux Distros Unpatched Vulnerability : CVE-2017-15576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2020-13324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API...
MAL-2025-41914 Malicious code in @ibm-integration/flow-canvas (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in cameraroll (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41952 Malicious code in cameraroll (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41946 Malicious code in batchedbridge (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41935 Malicious code in accumulateinfo (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @callcenter-frontend/shared-types (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...
Malicious code in @callcenter-frontend/api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 924eeec3ead0762c18ae254572edc5e76a3a27d3003bdea3c80eb6902fccf7c8 The OpenSSF Package Analysis project identified...
Malicious code in @callcenter-frontend/ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4016a8ba643f5006745e20e9ffdf0834e7866393f01cb525cd3bfafc8131218 The OpenSSF Package Analysis project identified...
Malicious code in @callcenter-frontend/helpers (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf97c6a167662f11bb874f05f30d15f1666631f719cbfee2485d3df20dbd569f The OpenSSF Package Analysis project identified...
Malicious code in @callcenter-frontend/services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...