Lucene search
+L

418 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/15 10:21 p.m.6 views

Malicious code in @nstudio/ui-collectionview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f8f20758a21ce0fa5e40e1aa5a26a4e5980c93f75bada83dca814ad306677d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/08 3:20 p.m.5 views

Malicious code in color-convert (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71ee3370ed9cf22bf89fbf40c954408a6ddcd17fbd38750027a2b7fab6034bce Any computer that has this package installed or running should be considered fully compromised. All...

7.1AI score
SaveExploits0References5
OpenVAS
OpenVAS
added 2025/08/07 12:00 a.m.2 views

openSUSE Security Advisory (SUSE-SU-2025:02701-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.00611EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/30 3:23 p.m.5 views

Malicious code in @sme-configs/karma-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 650b31b0f3209c6ac44a7187c6a39bf6f634660ded19dc4dffd69f7f906dc285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/07/23 12:00 a.m.10 views

Microsoft Windows Elevation of Privilege Vulnerability (KB5042320)

This host is missing an important security update according to Microsoft KB5042320 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

7.8CVSS7.2AI score0.00651EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.4 views

Microsoft Office Code Execution Vulnerability (CNVD-2025-16691)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

7CVSS8.1AI score0.00324EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/15 1:31 a.m.5 views

Malicious code in nodestream-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd27c0af10fcdf2bbbe772dc6442359db1be060eabb88d8343982bdcad7e872c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/10 6:58 a.m.9 views

Malicious code in azure-prometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47fd9dad2205644dc2dc1629b5ba8933f2243510d26fca0bb35e2fb3f1e602a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/07/04 11:59 p.m.374 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463: Local Privilege Escalation via Sudo chroot in...

9.3CVSS10AI score0.58759EPSS
SaveExploits71
GithubExploit
GithubExploit
added 2025/07/04 10:28 p.m.261 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chr...

9.3CVSS9.5AI score0.58759EPSS
SaveExploits71
GithubExploit
GithubExploit
added 2025/07/04 6:20 p.m.507 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463: Local Privilege Escalation Exploit for Sudo !...

9.3CVSS10AI score0.58759EPSS
SaveExploits71
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/30 2:15 p.m.6 views

Malicious code in betsson (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0a75e59ad3bc711c1c85bcaa0ffa95881a78cfb3542b431244d3af5e80b3e48 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/06/20 3:47 p.m.4 views

MAL-2025-5199 Malicious code in postcss-color-fn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1cd24ceaf86cd4c6ea692394931ef883d797f87e012ff4ccb60afc7fb8fa5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/07 5:15 a.m.6 views

Malicious code in fin-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9a10c09cf18a155ebac430e436ab4c59017c72a1948cea3cbc1b70815cd8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/04 12:00 a.m.9 views

PT-2025-23832 · Amazon · Freertos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer overflow issue has been identified, allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue affects systems using Buffer Allocation...

7.5CVSS6.9AI score0.00317EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2025/06/04 12:00 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2025:1434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.7AI score0.00105EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/06/04 12:00 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2024:3424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.4AI score0.00544EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/06/04 12:00 a.m.3 views

SUSE: Security Advisory (SUSE-SU-2025:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS7.7AI score0.00647EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/05/29 12:00 a.m.6 views

Debian: Security Advisory (DLA-4184-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.5AI score0.12592EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/27 5:25 a.m.10 views

Malicious code in athira-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03764ecb085360e3cbc92fb68e4f259af41698f01a6b6a4684c7ed5a899b12a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder