Lucene search
+L

9248 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:29 a.m.6 views

Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 4:29 a.m.3 views

EUVD-2025-115831

Malicious code in cache-luna-socketio-foundation npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 4:29 a.m.4 views

EUVD-2025-113270

Malicious code in gatsby-exec-foundation-gulp npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:29 a.m.4 views

Malicious code in meteor-foundation-callback-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158cc65ad87381b4a564c458d959004d7496c8d9fb16a7a1070b0685ea9fef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/11/12 4:29 a.m.3 views

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/12 4:29 a.m.4 views

MAL-2025-149232 Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/12 4:29 a.m.2 views

MAL-2025-146982 Malicious code in query-ultra-foundation-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c34a8bb4f140d8b1c22dc64d5bd563c9a1e102e0768876da83550b8f89365f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/12 4:29 a.m.3 views

MAL-2025-142669 Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 4:29 a.m.3 views

EUVD-2025-114069

Malicious code in enceladus-vuetify-foundation-jupiter npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/12 4:29 a.m.5 views

EUVD-2025-123510

Malicious code in postcss-loader-style-loader-foundation-ariel npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:29 a.m.6 views

Malicious code in bootstrap-foundation-rehype-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f123f6cfaa91f9978bdc24cca9623e08d85340a93961fc3ad11dca2454b73e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.6 views

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

6.3AI score0.00018EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/12 12:0 a.m.5 views

sudo-rs 授权问题漏洞

sudo-rs is an open source in-memory security implementation of sudo and su by Trifecta Tech Foundation. An authorization issue vulnerability exists in sudo-rs version 0.2.5 through versions prior to 0.2.10, which stems from improperly logged authentication timestamps and could lead to bypassing...

4.4CVSS6.6AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/11 12:30 a.m.8 views

EUVD-2025-50830

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

7.3AI score0.00435EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/11 12:11 a.m.13 views

CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

7.2CVSS7.8AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/10 11:15 p.m.6 views

CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

7.2CVSS6.1AI score0.00435EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/10 11:15 p.m.8 views

CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

7.2CVSS0.00435EPSS
SaveExploits1References1
RustSec
RustSec
added 2025/11/10 12:0 p.m.12 views

tandem_http_server is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

7AI score
SaveExploits0
OSV
OSV
added 2025/11/10 12:0 p.m.10 views

RUSTSEC-2025-0117 tandem is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/11/10 12:0 p.m.9 views

RUSTSEC-2025-0114 tandem_http_client is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder