380 matches found
Access of Uninitialized Pointer
Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the processgotsectioncontents function when handling a specially crafted ELF binary containing malformed relocation or symbol data. An attacker can cause the application to terminate abnormally by...
CVE-2025-69650
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dumprelocations may return early without initializing the allrelocations array. As a result, processgotsectioncontents may pass ...
CVE-2025-11009
The CVE-2025-11009 issue affects Mitsubishi Electric GT Designer3 (GOT2000 GOT1000) where credentials are stored in plaintext in project files (Cleartext Storage of Sensitive Information). Root cause: credentials verifi ed/stored in plaintext (CWE-312). Impact: local, unauthenticated attacker cou...
EUVD-2025-178683
Malicious code in got-install-blackhole-pipe npm...
EUVD-2025-178682
Malicious code in got-loglevel-ceres-acamar npm...
Malicious code in chai-got-pino-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4038eb99c7a3c61857cd8ea91f7024e5f1510152d4f3c6577ad77a0bfbd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180158
Malicious code in babel-singularity-got-hadron npm...
Malicious code in got-lynx-greatfilter-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1e5ae3602ba1d907e123d07c8bb75e62724ff1d8078775eb901682291c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phoebe-sagitta-cosmiconfig-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176013
Malicious code in terraforming-filament-got-dione npm...
EUVD-2025-177206
Malicious code in phoebe-sagitta-cosmiconfig-got npm...
EUVD-2025-176834
Malicious code in query-relay-tethys-got npm...
EUVD-2025-176660
Malicious code in rest-paleomagnetism-eris-got npm...
EUVD-2025-177819
Malicious code in mira-wolf-prompts-got npm...
EUVD-2025-176807
Malicious code in radioastronomy-zooarchaeology-got-magnetar npm...
EUVD-2025-177890
Malicious code in mesosphere-nanotechnology-got-scorpius npm...
EUVD-2025-178681
Malicious code in got-lynx-greatfilter-betelgeuse npm...
EUVD-2025-177156
Malicious code in pipe-got-filament-xenon npm...
Malicious code in terraforming-filament-got-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0245ded8963921b58e23bb01f640b9793148f6172410251d42eb870406270296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...