14941 matches found
CVE-2025-59113
Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting this parameter. Only version 4.1 was tested and...
Itel DAB Gateway IDGat security vulnerability
Itel DAB Gateway IDGat is an audio transmission gateway from Itel Italy. A security vulnerability exists in the Itel DAB Gateway IDGat build c041640a version, which stems from improper JWT authentication and could lead to authentication bypass and full device control...
Itel DAB MUX security vulnerability
Itel DAB MUX is an encoding and multiplexing all-in-one device from Itel, Italy. A security vulnerability exists in the Itel DAB MUX build c041640a version, which stems from improper JWT authentication and could lead to authentication bypass and full device control...
gcc crate is unmaintained
The gcc crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - cc...
[SECURITY] Fedora 41 Update: python-uv-build-0.9.7-2.fc41
This package is a slimmed down version of uv containing only the build backend...
[SECURITY] Fedora 42 Update: python-uv-build-0.9.7-2.fc42
This package is a slimmed down version of uv containing only the build backend...
Fedora 41 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-00e5b3d89c)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-00e5b3d89c advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
Fedora 42 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-e60a4ba4d7)
The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e60a4ba4d7 advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21366 more potentially affected by CVE-2025-64718 via js-yaml (>=3.0.0, <=3.14.1)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: OSV:GHSA-MH29-5H37-FV8M...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +265 more potentially affected by CVE-2025-64525 via astro (>=3.0.12, <=5.15.1)
astro NPM version =3.0.12, =0.0.1, =1.0.0, =0.5.0, =1.0.0, =0.2.0, =0.0.0-experimental-7c2f356, =0.0.0-experimental-7c2f356, =0.0.1, =0.0.1, =0.1.3, =0.1.0, =0.1.0-beta.0, =0.2.1 and more Source cves: CVE-2025-64525 Source advisory: OSV:GHSA-HR2Q-HP5Q-X767...
EUVD-2025-179918
Malicious code in cache-mensa-leda-build npm...
EUVD-2025-180222
Malicious code in auth0-scripts-slides-build npm...
EUVD-2025-178474
Malicious code in hyperion-build-style-loader-lynx npm...
EUVD-2025-177152
Malicious code in pipe-parallax-build-kinetic npm...
EUVD-2025-177685
Malicious code in nebula-build-auth0-mui npm...
EUVD-2025-179958
Malicious code in build-commitlint-config-angular-lithosphere-string npm...
EUVD-2025-175719
Malicious code in virgo-build-equinox-init npm...
EUVD-2025-179956
Malicious code in build-enceladus-supernova-joviology npm...
Malicious code in hugo-build-configstore-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...