10594 matches found
Inbox COM objects Code Execution
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
No, ICE (Probably) Didnât Buy Guided Missile Warheads
A federal contracting database lists an ICE payment for $61,218 with the payment code for âguided missile warheads and explosive components.â But it appears ICE simply entered the wrong code...
ALSA-2025:18983 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: firefox: Memory safety bugs CVE-2025-11714 thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures CVE-2025-11709 thunderbird: firefox: Cross-process information...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the Server: Components Services component. A high privileged attacker can cause the server to hang or crash repeatedly by sending specially crafted requests over the network...
Real-World Usability of Vulnerability Proof-Of-Concepts: A Comprehensive Study
The Proof-of-Concept PoC for a vulnerability is crucial in validating its existence, mitigating false positives, and illustrating the severity of the security threat it poses. However, research on PoCs significantly lags behind studies focusing on vulnerability data. This discrepancy can be...
PT-2025-42966
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0 Description An easily exploitable issue exists in the Server: Components Services component of MySQL Server. A...
CVE-2025-53069: Allocation of Resources Without Limits or Throttling
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. These vulnerabilities have been addressed in the update. Vulnerability Details CVEID:CVE-2025-30153 DESCRIPTION: kin-openapi is a Go project for handling OpenAPI...
October 20, 2025âKB5070773 (OS Builds 26200.6901 and 26100.6901) Out-of-band
None None...
RUSTSEC-2025-0079 `unic-ucd-hangul` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer - unicode-normalization...
`unic` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icu - idna - unicode-bidi...
Malicious code in cp2-shared-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e522530df817242e07e68b2cb283eb4e70763b4ba8d248c97791fab28dc67887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48450 Malicious code in cp2-shared-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e522530df817242e07e68b2cb283eb4e70763b4ba8d248c97791fab28dc67887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-34876
Malicious code in cp2-shared-components npm...
MAL-2025-48475 Malicious code in @vscode-bicep-ui/components (npm)
The package @vscode-bicep-ui/components was found to contain malicious code...
Malicious code in @vscode-bicep-ui/components (npm)
The package @vscode-bicep-ui/components was found to contain malicious code...
Microsoft Inbox COM Objects Code Execution Vulnerability (CNVD-2025-25713)
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code...
Security Bulletin: IBM QRadar Investigation Assistant app for IBM QRadar SIEM includes components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Investigation Assistant app for IBM QRadar SIEM has addressed the applicable CVEs Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a...
Malicious Package
Overview components-flexibility is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
qrmark-logo (>=1.0.7, <=1.0.8) potentially affected by unknown CVE via components-flexibility (6.1.25)
components-flexibility NPM version 6.1.25 is affected by a known vulnerability. The following packages have a transitive dependency on components-flexibility and may be impacted: - qrmark-logo =1.0.7, =1.0.8 Source cves: unknown CVE Source advisory: SNYK:JS-COMPONENTSFLEXIBILITY-13561387...