429 matches found
CVE-2026-30845: Exposure of Sensitive Information to an Unauthorized Actor
Wekan is an open source kanban tool built with Meteor. In versions 8.31.0 through 8.33, the board composite publication in Wekan publishes all integration data for a board without any field filtering, exposing sensitive fields including webhook URLs and authentication tokens to any subscriber...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000737)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000737 advisory. The atalkrecvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure...
Linux ice_ddp Heap Buffer Overflow DoS
The vulnerability of the ice/iceddp.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
Malware in ddp-common
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ddp-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ae70118a343c68fd301dbce7ef05fbdf587541f9d61bd1df8a5048578282a The package ddp-common was found to contain malicious code. Source: ghsa-malware afe6b2223d57e3d32fa4220c3a687d0b70fd8c0047fd4925d4b0e6766ce5420e Any...
EUVD-2025-202366
Malicious code in ddp-common npm...
MAL-2025-192408 Malicious code in ddp-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ae70118a343c68fd301dbce7ef05fbdf587541f9d61bd1df8a5048578282a The package ddp-common was found to contain malicious code. Source: ghsa-malware afe6b2223d57e3d32fa4220c3a687d0b70fd8c0047fd4925d4b0e6766ce5420e Any...
Malicious Package
Overview ddp-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2023-41215
Malicious code in bioql PyPI...
EUVD-2023-39746
Malicious code in bioql PyPI...
EUVD-2023-39729
Malicious code in bioql PyPI...
EUVD-2023-39728
Malicious code in bioql PyPI...
EUVD-2023-39730
Malicious code in bioql PyPI...
EUVD-2025-15378
Malicious code in bioql PyPI...
EUVD-2023-41228
Malicious code in bioql PyPI...
EUVD-2023-39743
Malicious code in bioql PyPI...
EUVD-2023-41218
Malicious code in bioql PyPI...
EUVD-2023-39736
Malicious code in bioql PyPI...