3974 matches found
Malicious code in nectarine-orange-delta-eqmuo (npm)
The package nectarine-orange-delta-eqmuo was found to contain malicious code...
MAL-2025-45287 Malicious code in nectarine-orange-delta-eqmuo (npm)
The package nectarine-orange-delta-eqmuo was found to contain malicious code...
MAL-2025-43957 Malicious code in delta-cherry-yam-svnlt (npm)
The package delta-cherry-yam-svnlt was found to contain malicious code...
Malicious code in delta-alpha-charlie-jkmkg (npm)
The package delta-alpha-charlie-jkmkg was found to contain malicious code...
MAL-2025-43956 Malicious code in delta-alpha-charlie-jkmkg (npm)
The package delta-alpha-charlie-jkmkg was found to contain malicious code...
Malicious code in delta-cherry-yam-svnlt (npm)
The package delta-cherry-yam-svnlt was found to contain malicious code...
MAL-2025-42194 Malicious code in @com-delta-omnichannel/core (npm)
The package @com-delta-omnichannel/core was found to contain malicious code...
Malicious code in @com-delta-idp/core (npm)
The package @com-delta-idp/core was found to contain malicious code...
Malicious code in @com-delta-omnichannel/core (npm)
The package @com-delta-omnichannel/core was found to contain malicious code...
MAL-2025-42193 Malicious code in @com-delta-idp/core (npm)
The package @com-delta-idp/core was found to contain malicious code...
DeepDiff 安全漏洞
DeepDiff is a Python library by the individual developer Sep Dehpour. A security vulnerability exists in DeepDiff 8.6.0 and earlier versions, which stems from Delta class prototype contamination and could lead to denial of service and remote code execution...
CISA Releases Five Industrial Control Systems Advisories
CISA released five Industrial Control Systems ICS advisories on September 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-247-01 Honeywell OneWireless Wireless Device Manager WDM ICSA-25-217-01 Mitsubishi...
Delta Electronics DIAView Security Bypass Vulnerability
Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security bypass vulnerability exists in Delta Electronics DIAView, which can be exploited by attackers to cause authentication bypass...
Class Pollution
Overview deepdiff is a Deep Difference and Search of any Python object/data. Recreate objects by adding adding deltas to each other. Affected versions of this package are vulnerable to Class Pollution via the Delta constructor and manipulation of the SAFETOIMPORT set. An attacker can execute...
GHSA-MW26-5G2V-HQW3 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...
PT-2025-36336
Name of the Vulnerable Software and Affected Versions DeepDiff versions 5.0.0 through 8.6.0 Description DeepDiff is a Python project for deep difference and search of data. Versions 5.0.0 through 8.6.0 are susceptible to class pollution through the Delta class constructor. When combined with a...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on September 2, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-245-01 Delta Electronics EIP Builder ICSA-25-245-02 Fuji Electric FRENIC-Loader 4...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...