2341 matches found
MAL-2025-16437 Malicious code in cakemail-ui-bootstrap (npm)
The package cakemail-ui-bootstrap was found to contain malicious code...
MAL-2025-22394 Malicious code in hermes-celeste-react-bootstrap-nodejs (npm)
The package hermes-celeste-react-bootstrap-nodejs was found to contain malicious code...
CVE-2025-8904
Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...
CVE-2025-8904 Privilege escalation issue in Amazon EMR Secret Agent component
Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...
Linux Distros Unpatched Vulnerability : CVE-2025-1647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue...
Malicious code in vite-postcss-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview vite-postcss-bootstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
MAL-2025-6346 Malicious code in vite-postcss-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31b1ae9dbf2d4d4b83a07e7c8d7d340507e18144308970a7cd81c1c6e5dc125f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-H4J7-5RXR-P4WC vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2025-26646 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-H4J7-5RXR-P4WC vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2025-26646 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
VulnCheck KEV: CVE-2025-47204
An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...
Optimal Debiased Inference on Privatized Data Via Indirect Estimation and Parametric Bootstrap
We design a debiased parametric bootstrap framework for statistical inference from differentially private data. Existing usage of the parametric bootstrap on privatized data ignored or avoided handling the effect of clamping, a technique employed by the majority of privacy mechanisms. Ignoring th...
GHSA-266M-WP2V-X7MQ vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2025-30399 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-266M-WP2V-X7MQ vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2025-30399 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2
CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2. A patched version of the package is available...
CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-13
CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-13. A patched version of the package is available...