451 matches found
Malicious code in async-authenticate-iota-cron-table (npm)
The package async-authenticate-iota-cron-table was found to contain malicious code...
MAL-2025-33278 Malicious code in simple-stub-tree-nu-authenticate (npm)
The package simple-stub-tree-nu-authenticate was found to contain malicious code...
MAL-2025-14861 Malicious code in array-hash-view-balance-authenticate (npm)
The package array-hash-view-balance-authenticate was found to contain malicious code...
Malicious code in array-hash-view-balance-authenticate (npm)
The package array-hash-view-balance-authenticate was found to contain malicious code...
Malicious code in simple-stub-tree-nu-authenticate (npm)
The package simple-stub-tree-nu-authenticate was found to contain malicious code...
Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm)
The package benchmark-epsilon-runtime-authenticate-slow was found to contain malicious code...
MAL-2025-15095 Malicious code in authenticate-enum-report-query-moon (npm)
The package authenticate-enum-report-query-moon was found to contain malicious code...
MAL-2025-15096 Malicious code in authenticate-log-lambda-double-notify (npm)
The package authenticate-log-lambda-double-notify was found to contain malicious code...
Malicious code in authenticate-enum-report-query-moon (npm)
The package authenticate-enum-report-query-moon was found to contain malicious code...
Malicious code in authenticate-log-lambda-double-notify (npm)
The package authenticate-log-lambda-double-notify was found to contain malicious code...
MAL-2025-14984 Malicious code in async-authenticate-iota-cron-table (npm)
The package async-authenticate-iota-cron-table was found to contain malicious code...
EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1934)
According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read.CVE-2025-32050 A...
CLSA-2025-1755115606 golang: Fix of CVE-2025-4673
CVE-2025-4673: remove Proxy-Authorization and Proxy-Authenticate headers from cross-origin redirects to prevent sensitive information leakage...
CVE-2019-19144: Improper Restriction of Recursive Entity References in DTDs
XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...
Medium: containerd
Issue Overview: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon...
SUSE CVE-2025-51471
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint...
PYSEC-2025-147
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the server.auth.URL function. An attacker can obtain authentication tokens and circumvent access controls by supplying a crafted realm value in the WWW-Authenticate header returned from the /api/pull endpoint...
CVE-2025-51471: Insufficient Verification of Data Authenticity
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint...