7560 matches found
Linux __iodyn_find_io_region Heap Buffer Overflow DoS
The vulnerability of the iodynfindioregion function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-36251
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347...
CVE-2025-36096
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques...
CVE-2025-36236 AIX Path Traversal
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server formerly known as NIM master service nimesis could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system...
CVE-2025-36251 AIX Command Execution
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347...
Malicious code in io-publish-antd-outercore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedc22f8cbf0d9e9183bba0c8556e601ef32acc19e25350db1825e97f8f54539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in io-quark-babel-centaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in start-io-nightwatch-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176899
Malicious code in pulsar-run-script-process-io npm...
EUVD-2025-176865
Malicious code in quantumfoam-dysonswarm-io-aquarius npm...
EUVD-2025-178537
Malicious code in hermes-jekyll-io-nightwatch npm...
EUVD-2025-178356
Malicious code in io-radiant-kinetic-betelgeuse npm...
EUVD-2025-178318
Malicious code in jabbah-umbriel-io-soap npm...
EUVD-2025-179075
Malicious code in eridanus-geochronology-element-ui-io npm...
EUVD-2025-176217
Malicious code in start-io-nightwatch-install npm...
Malicious code in remark-io-sass-loader-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176998
Malicious code in prosthetics-commitlint-astrobiology-io npm...
EUVD-2025-175565
Malicious code in wezen-halley-less-io npm...