Lucene search
+L

222 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 12:17 a.m.9 views

Malicious code in agus-soto32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3c12cf54f5abb1c037a923c7b0fa1bba55a49c477ad3602a7ec8c754ed9e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/10 4:5 a.m.9 views

Malicious code in dono-takokak50-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77961aaf1311fcdd9f713bf0ff7ce6f46722808319408b907eb1656bd772c5b4 The package dono-takokak50-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/10/23 7:15 p.m.12 views

CVE-2025-12044 Vault Vulnerable to Denial of Service Due to Rate Limit Regression

Vault and Vault Enterprise “Vault” are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from a previous fix for +HCSEC-2025-24+|https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393...

7.5CVSS7.3AI score
SaveExploits0References4
EUVD
EUVD
added 2025/10/17 5:8 p.m.31 views

EUVD-2025-34895

OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requests...

7.5CVSS6.5AI score0.00699EPSS
SaveExploits0References7
NVD
NVD
added 2025/10/17 4:15 p.m.18 views

CVE-2025-59043

OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...

7.5CVSS0.00647EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/17 4:3 p.m.23 views

CVE-2025-59043 OpenBao vulnerable to denial of service via malicious JSON request processing

OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...

7.5CVSS0.00647EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-15679

Malware in sbrugna...

9.9CVSS9.1AI score0.01804EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-15682

Malware in sbrugna...

9.9CVSS9.2AI score0.01534EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-15661

Malware in sbrugna...

9.9CVSS9.3AI score0.01534EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-0299

Malware in sbrugna...

7.5CVSS7.5AI score0.01799EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-2487

Malware in sbrugna...

9.8CVSS9.2AI score0.02319EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-15683

Malware in sbrugna...

9.9CVSS9.1AI score0.01534EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-15664

Malware in sbrugna...

9.9CVSS9.2AI score0.01534EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-15649

Malware in sbrugna...

9.9CVSS9.2AI score0.01736EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-20222

Malware in sbrugna...

7.5CVSS7.5AI score0.01031EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-12358

Malware in sbrugna...

7.5CVSS7.6AI score0.02494EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-15691

Malware in sbrugna...

9.9CVSS8.5AI score0.01489EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-0387

Malware in sbrugna...

7.5CVSS7.6AI score0.0497EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mod_security (UTSA-2025-611667)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-611667 advisory. ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to...

7.5CVSS7.5AI score0.00589EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-31637

Malicious code in bioql PyPI...

9CVSS9.2AI score0.00731EPSS
SaveExploits1References2
Rows per page
Query Builder