107 matches found
EUVD-1999-0743
Malware in sbrugna...
EUVD-2017-17806
Malware in sbrugna...
EUVD-2008-5883
Malware in sbrugna...
EUVD-2021-2611
Malware in sbrugna...
EUVD-2020-27532
Malware in sbrugna...
EUVD-2019-15423
Malware in sbrugna...
EUVD-2010-4023
Malware in sbrugna...
EUVD-2016-4048
Malware in sbrugna...
EUVD-2024-2676
Malicious code in bioql PyPI...
EUVD-2024-3226
Malicious code in bioql PyPI...
EUVD-2023-2643
Malicious code in bioql PyPI...
EUVD-2022-7004
Malicious code in bioql PyPI...
EUVD-2023-41171
Malicious code in bioql PyPI...
EUVD-2022-5701
Malicious code in bioql PyPI...
EUVD-2022-43487
Malicious code in bioql PyPI...
CVE-2025-54803 js-toml is vulnerable to Prototype Pollution
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...
CVE-2025-3466
CVE-2025-3466 affects langgenius/dify versions 1.1.0–1.1.2. Root cause is unsanitized input in the code node that enables overriding global JavaScript functions (e.g., parseInt) before sandbox restrictions, allowing arbitrary code execution with full root permissions. Documented impact includes a...
CVE-2025-3466 Unsanitized Input in langgenius/dify
langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictio...
CVE-2023-32340
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...