26074 matches found
MAL-2025-15254 Malicious code in az-ext (npm)
The package az-ext was found to contain malicious code...
MAL-2025-25953 Malicious code in marketing_extension_schemas (npm)
The package marketingextensionschemas was found to contain malicious code...
Malicious code in trezor-link-chrome-extension (npm)
The package trezor-link-chrome-extension was found to contain malicious code...
MAL-2025-37489 Malicious code in ud-extension (npm)
The package ud-extension was found to contain malicious code...
Malicious code in sentry-sdk-browser-extension (npm)
The package sentry-sdk-browser-extension was found to contain malicious code...
MAL-2025-17963 Malicious code in dappradar-browser-extension (npm)
The package dappradar-browser-extension was found to contain malicious code...
MAL-2025-12675 Malicious code in @zalastax/nolb-node-red-contrib-i (npm)
The package @zalastax/nolb-node-red-contrib-i was found to contain malicious code...
MAL-2025-11410 Malicious code in @zalastax/nolb-extp (npm)
The package @zalastax/nolb-extp was found to contain malicious code...
Malicious code in dappradar-browser-extension (npm)
The package dappradar-browser-extension was found to contain malicious code...
Malicious code in webflow-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42b661acb4e76b31c10ac6138d3b67ef2606a39e5c0c291796f123ac6b232d93 The OpenSSF Package Analysis project identified 'webflow-extension' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6875 Malicious code in webflow-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42b661acb4e76b31c10ac6138d3b67ef2606a39e5c0c291796f123ac6b232d93 The OpenSSF Package Analysis project identified 'webflow-extension' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2025-37228
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to Generic Segmentation Offload GSO and IPv6 packets with extension headers. Specifically, the kernel incorrectly requests checksum offload fo...
CVE-2025-55194
Part-DB pre-1.17.3 allows any authenticated user to upload a profile picture with a misleading file extension (for example .jpg.txt), triggering a persistent 500 Internal Server Error when viewing or editing the user profile. This creates a Denial of Service in the user management UI for both use...
CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload
Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...
CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload
Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...
CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload
Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...
CVE-2025-32451
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...
PT-2025-33100 · Part-Db · Part-Db
Name of the Vulnerable Software and Affected Versions: Part-DB versions prior to 1.17.3 Description: Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user could upload a profile picture with a misleading file extension e.g...