1070 matches found
PT-2025-53132
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the btrfs file system. Specifically, the issue involves the order of operations within the btrfs init new buffer function. The btrfs set head...
CVE-2025-13604
The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including, 2.168 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...
The vulnerability of the clean_demultiplex_info() function in the fs/smb/client/connect.c module of the SMB client support library in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the cleandemultiplexinfo function in the fs/smb/client/connect.c module of the SMB client support library in Linux operating systems is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
Arbitrary Code Injection
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient validation in the cleanDangerousTwig function. An attacker can execute arbitrary commands on the...
ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware
A threat actor known as ShadyPanda has been linked to a seven-year-long browser extension campaign that has amassed over 4.3 million installations over time. Five of these extensions started off as legitimate programs before malicious changes were introduced in mid-2024, according to a report fro...
MAL-2025-190820 Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198857
Malicious code in @quick-start-soft/quick-git-clean-markdown npm...
CVE-2025-12170
The Checkbox plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wpajaxnoprivcheckboxcleanlog' AJAX endpoint in all versions up to, and including, 2.8.10. This makes it possible for unauthenticated attackers to clear log files...
EUVD-2025-117491
Malicious code in clean-brown-shark npm...
EUVD-2025-106070
Malicious code in cleanminkz3n npm...
EUVD-2025-106072
Malicious code in cleanalbatrossz3n npm...
Malicious code in clean_bobolink_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3cfeb9b106acf9ce6a268d98c16acde2a8b34c6b1823b173351bc2e4400d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in clean_goose_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d892286bc24cffe4db62f6275939a5a2cdf66d433c365611ff214039301b4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92729
Malicious code in cleanechidnaz3n npm...
EUVD-2025-79637
Malicious code in cleancardinalz3n npm...
EUVD-2025-82492
Malicious code in cleanmouse0xrequest npm...
EUVD-2025-64977
Malicious code in cleandovez3n npm...
EUVD-2025-64976
Malicious code in cleantyrannosaurusz3n npm...