EUVD-2025-176407

Malicious code in shell-class-encrypt-info-zeta npm...

EUVD-2025-177881

Malicious code in meta-monitor-info-import-final npm...

EUVD-2025-178596

Malicious code in hash-uglify-cluster-info-orchestrate npm...

EUVD-2025-180148

Malicious code in bad-info-encrypt-boolean-simple npm...

EUVD-2025-179915

Malicious code in cache-phi-public-info-sed npm...

EUVD-2025-176172

Malicious code in stub-encode-object-meta-info npm...

EUVD-2025-176831

Malicious code in quick-info-star-new-import npm...

EUVD-2025-175960

Malicious code in theta-daemon-moon-char-info npm...

EUVD-2025-179374

Malicious code in decrypt-import-info-optimize-authorize npm...

EUVD-2025-178093

Malicious code in link-cold-file-mock-info npm...

EUVD-2025-176641

Malicious code in rho-water-load-info-mu npm...

Malicious code in pipe-grid-byte-old-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c043a8df19e2deb325b85449d0ea39297d0bfab853cf484146aafbc444bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178427

Malicious code in index-wind-info-emulate-fork npm...

EUVD-2025-178036

Malicious code in log-info-good-promise-user npm...

CVE-2025-60679

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2FWv1.10CNB05R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated usin...

Siemens SIMATIC S7-1500 Use After Free (CVE-2024-26805)

In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in skbdatagramiter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

DEBIAN-CVE-2025-64500

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...

GHSA-3RG7-WF37-54RM Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Description The Request class improperly interprets some PATHINFO in a way that leads to representing some URLs with a path that doesn't start with a /. This can allow bypassing some access control rules that are built with this /-prefix assumption. Resolution The Request class now ensures that U...

EUVD-2025-131928

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...

CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...