12906 matches found
CVE-2025-54628
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54628
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54628
CVE-2025-54628 corresponds to a vulnerability described as incomplete verification information in the communication module, with potential impact to availability. Multiple sources (including Red Hat, NVD, CNVD/CNNVD, PT-2025-32070) reference Huawei HarmonyOS/EMUI and related communication compone...
MAL-2025-6793 Malicious code in productboard-eslint-plugin-relay (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50a95e4b008863c195930bcd301dd1f243002839a301a5be5d0078cab7b22786 The OpenSSF Package Analysis project identified...
Linux Distros Unpatched Vulnerability : CVE-2019-9799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent...
Linux Distros Unpatched Vulnerability : CVE-2024-7246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed...
PT-2025-32070 · Unknown · Communication Modules
Name of the Vulnerable Software and Affected Versions: communication module affected versions not specified Description: The vulnerability involves incomplete verification information within the communication module. Successful exploitation of this issue may affect availability. Recommendations: ...
Malicious code in thisisthedaventest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Man-in-the-Middle Attack Prevention Guide
Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...
CVE-2025-50340
An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...
CVE-2025-50340
CVE-2025-50340 affects SOGo Webmail up to version 5.6.0 (authenticated IDOR). The vulnerability lets an authenticated user send emails on behalf of other users by manipulating a sender identity in the email-sending request, due to insufficient verification of authorization to use the specified se...
Whispering Agents: an Event-Driven Covert Communication Protocol for the Internet of Agents
The emergence of the Internet of Agents IoA introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent A2A protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable t...
Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in cycalculator-ybvd (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6712 Malicious code in cycalculator-ye51 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in undeface-test-5 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in zano_ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-auth-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...
MAL-2025-6675 Malicious code in undeface (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6e61be1ff207a63e7d860121269781909d89daf344c1af7875918ac2d0fa22 The OpenSSF Package Analysis project identified 'undeface' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...