Mailpit -- Performance information disclosure

Ralph Slooten Mailpit developer reports: An HTTP endpoint was found which exposed expvar runtime information memory usage, goroutine counts, GC behavior, uptime and potential runtime flags due to the Prometheus client library dependency...

EUVD-2013-0031

Malware in sbrugna...

EUVD-2015-6947

Malware in sbrugna...

EUVD-2020-21737

Malware in sbrugna...

EUVD-2006-5702

Malware in sbrugna...

EUVD-2019-0196

Malware in sbrugna...

EUVD-2008-5491

Malware in sbrugna...

EUVD-2000-0834

Malware in sbrugna...

EUVD-2024-0801

Malicious code in bioql PyPI...

EUVD-2024-3492

Malicious code in bioql PyPI...

EUVD-2025-7158

Malicious code in bioql PyPI...

EUVD-2024-1893

Malicious code in bioql PyPI...

EUVD-2022-45051

Malicious code in bioql PyPI...

EUVD-2022-2303

Malicious code in bioql PyPI...

EUVD-2025-0042

Malicious code in bioql PyPI...

CVE-2025-59047 matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method

matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the RoomMember::normalizedpowerlevel method can cause a panic if a room member has a power level of Int::Min. The issue is fixed in matrix-sdk-base 0.14.1. The affected method isn’t...

Linux Distros Unpatched Vulnerability : CVE-2025-30224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MyDumper is a MySQL Logical Backup Tool. The MySQL C client library libmysqlclient allows authenticated remote actors to read arbitrary files from client system...

Linux Distros Unpatched Vulnerability : CVE-2024-10977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq...

MAL-2025-36801 Malicious code in thescene-ts-client-library (npm)

The package thescene-ts-client-library was found to contain malicious code...

Malicious code in thescene-ts-client-library (npm)

The package thescene-ts-client-library was found to contain malicious code...