10594 matches found
PT-2025-42074
Name of the Vulnerable Software and Affected Versions Inbox COM Objects affected versions not specified Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...
PT-2025-42071
Name of the Vulnerable Software and Affected Versions versions prior to 2025-58735 Description A use-after-free condition exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version that...
Cross-site Scripting (XSS)
Overview qwc2 is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser by...
EUVD-2025-33734
Malicious code in tailwind-style-components npm...
Malicious code in tailwind-style-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview tailwind-style-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2025-48305 Malicious code in tailwind-style-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RLSA-2025:16086 Moderate: mysql security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: mysqldump unspecified vulnerability CPU Apr 2025 CVE-2025-30722 mysql: Optimizer unspecified vulnerability CPU Apr 2025...
Malicious code in mshops-web-metrics-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ecbec2aacbd449fd0cb4b36bd3ac061312dae30f2dc01a987af141e97998523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview v0-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in v0-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Metasploit Wrap Up 10/09/2025
Meterpreter: Kickstarting Windows ARM64 and Reducing Memory Footprint This Metasploit-Framework release includes two important milestones for our payloads capability. The first, spearheaded by community contributor Alexander "xaitax" Hagenah, is an enhancement of our ReflectiveLoader, a crucial...
Directory Traversal
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Directory Traversal via the WriteFile and ReadFile tools. An attacker can gain full control over the server, including executing arbitrary commands, by supplying crafted file paths that allow...
Malicious code in v0-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48086 Malicious code in v0-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-31871
EUVD-2025-31871...
Video components Google Chrome Microsoft Edge Code Execution
The vulnerability of the Video component in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...