1248 matches found
Malicious code in theta-encode-daemon-rho-rain (npm)
The package theta-encode-daemon-rho-rain was found to contain malicious code...
Malicious code in zeta-fire-throw-dog-encode (npm)
The package zeta-fire-throw-dog-encode was found to contain malicious code...
MAL-2025-32476 Malicious code in route-promise-class-file-encode (npm)
The package route-promise-class-file-encode was found to contain malicious code...
Malicious code in xi-shell-zeta-assert-encode (npm)
The package xi-shell-zeta-assert-encode was found to contain malicious code...
MAL-2025-34573 Malicious code in tau-encode-web-sed-small (npm)
The package tau-encode-web-sed-small was found to contain malicious code...
Malicious code in sandbox-encode-string-view-good (npm)
The package sandbox-encode-string-view-good was found to contain malicious code...
MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)
The package sanitize-encode-interpret-sigma-water was found to contain malicious code...
Malicious code in fire-new-encode-fire-transpile (npm)
The package fire-new-encode-fire-transpile was found to contain malicious code...
MAL-2025-36803 Malicious code in theta-encode-daemon-rho-rain (npm)
The package theta-encode-daemon-rho-rain was found to contain malicious code...
MAL-2025-39767 Malicious code in xi-shell-zeta-assert-encode (npm)
The package xi-shell-zeta-assert-encode was found to contain malicious code...
Malicious code in interface-signal-encode-authorize-big (npm)
The package interface-signal-encode-authorize-big was found to contain malicious code...
MAL-2025-38455 Malicious code in virtualize-encode-fire-sudo-finally (npm)
The package virtualize-encode-fire-sudo-finally was found to contain malicious code...
MAL-2025-20702 Malicious code in float-module-export-encode-parse (npm)
The package float-module-export-encode-parse was found to contain malicious code...
MAL-2025-19087 Malicious code in easy-encode-notify-emulate-cache (npm)
The package easy-encode-notify-emulate-cache was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2025-30348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later dat...
LLM Framework Path Traversal
The vulnerability of the encodeimage function in the LlamaIndex framework, which is used for working with large language models, is related to an incorrect restriction on the path name of the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose...
PT-2025-30676 · Wwbn +1 · Avideo +1
Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 14.4 WWBN AVideo dev master commit 8a8954ff Description: A cross-site scripting xss issue exists in the LoginWordPress loginForm cancelUri parameter functionality. A crafted HTTP request can lead to arbitrary Javascript...
ThinkGem JeeSite code injection vulnerability
Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform for China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...
AZL-65048 CVE-2025-7345 affecting package gdk-pixbuf2 for versions less than 2.40.0-8
A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the encodeimage function. An attacker can access arbitrary files on the server by supplying crafted imagepath values...