33408 matches found
EUVD-2025-202896
Malicious code in ofjaaah12 npm...
EUVD-2025-202906
Malicious code in libxmlfinal5 npm...
EUVD-2025-202904
Malicious code in libxmljs10 npm...
EUVD-2025-202919
Malicious code in elf-stats-cosy-garland-592 npm...
EUVD-2025-202908
Malicious code in libxmlfinal3 npm...
EUVD-2025-202895
Malicious code in tnaparserxml npm...
EUVD-2025-202593
Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the downloadmedia method before using them in file path construction. When downloading media, if the user does not specify a custom filename...
EUVD-2025-202462
Ibexa is a composable end-to-end DXP Digital Experience Platform. Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This...
EUVD-2025-202634
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-202633
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2025-202335
Cybersecurity AI CAI is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the runsshcommandwithcredentials function, which is available to AI agents. Only password and command...
EUVD-2025-202388
Not used...
EUVD-2025-202384
Not used...
EUVD-2025-202387
Not used...
EUVD-2025-202383
Not used...
EUVD-2025-202395
Malicious code in yunxohang3 npm...
EUVD-2025-202378
Malicious code in vue2-amis-custom-widget123 npm...
EUVD-2025-202367
Malicious code in callback-hook npm...