1028 matches found
EUVD-2024-53439
Malicious code in bioql PyPI...
EUVD-2024-47994
Malicious code in bioql PyPI...
EUVD-2023-44323
Malicious code in bioql PyPI...
EUVD-2025-31580
Malicious code in bioql PyPI...
EUVD-2024-3238
Malicious code in bioql PyPI...
EUVD-2025-6299
Malicious code in bioql PyPI...
EUVD-2022-42623
Malicious code in bioql PyPI...
EUVD-2022-52450
Malicious code in bioql PyPI...
EUVD-2022-32622
Malicious code in bioql PyPI...
EUVD-2024-0602
Malicious code in bioql PyPI...
EUVD-2023-27050
Malicious code in bioql PyPI...
EUVD-2025-20502
Malicious code in bioql PyPI...
CLSA-2025-1758896091 gdk-pixbuf2: Fix of CVE-2025-7345
CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...
p0wnedShell
This is an offensive PowerShell host application written in C that runs PowerShell commands and functions within a PowerShell runspace environment. It includes various offensive PowerShell modules and binaries to facilitate post-exploitation activities, such as bypassing mitigations and creating...
CLSA-2025-1757698525 gdk-pixbuf2: Fix of CVE-2025-7345
CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...
CLSA-2025-1757662747 gdk-pixbuf2: Fix of CVE-2025-7345
CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...
CVE-2025-41035
appRain CMF 4.0.5 contains an authenticated path traversal vulnerability in the /apprain/common/download/ endpoint. The issue arises from handling of base64-encoded path parameters after /download/, allowing an attacker with sufficient permissions to access files outside the document root. Connec...
GHSA-MXH2-CCGJ-8635 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...
CVE-2025-57808
ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correc...
PT-2025-35518
Name of the Vulnerable Software and Affected Versions ESPHome versions 2025.8.0 Description ESPHome’s web server authentication check on the ESP-IDF platform can incorrectly pass when the client-supplied base64-encoded Authorization value is empty or a substring of the correct value. This allows...