293 matches found
EUVD-2014-9560
Malware in sbrugna...
EUVD-2015-1567
Malware in sbrugna...
EUVD-2018-0591
Malware in sbrugna...
EUVD-2014-9561
Malware in sbrugna...
PT-2025-41009
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.11.0rc2 Description vLLM is an inference and serving engine for large language models LLMs. The API key validation mechanism in versions prior to 0.11.0rc2 is susceptible to a timing attack. The string comparison used...
EUVD-2025-19627
Malicious code in bioql PyPI...
EUVD-2025-13015
Malicious code in bioql PyPI...
EUVD-2022-43243
Malicious code in bioql PyPI...
EUVD-2024-42883
Malicious code in bioql PyPI...
EUVD-2023-0989
Malicious code in bioql PyPI...
EUVD-2025-29164
Malicious code in bioql PyPI...
EUVD-2023-1222
Malicious code in bioql PyPI...
EUVD-2023-3057
Malicious code in bioql PyPI...
CVE-2025-57353
The Runtime components of messageformat package for Node.js before 3.0.2 contain a prototype pollution vulnerability. Due to insufficient validation of nested message keys during the processing of message data, an attacker can manipulate the prototype chain of JavaScript objects by providing...
ts-fns 安全漏洞
ts-fns is a java library by tangshuang personal developer. A security vulnerability exists in ts-fns versions prior to 13.0.7, which stems from insufficient validation of user-supplied keys by the assign function and could lead to a prototype pollution attack...
CVE-2025-7049
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJgmgtgmgtadduser' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
CVE-2025-7049
CVE-2025-7049 affects the WordPress plugin WPGYM - Wordpress Gym Management System up to version 67.7.0 . The vulnerability is a Privilege Escalation via a missing validation on a user-controlled key in the function MJ_gmgt_gmgt_add_user , allowing authenticated users with Subscriber+ privileges ...
Realtek rtl81xx SDK Wi-Fi Driver 安全漏洞
Realtek rtl81xx SDK Wi-Fi Driver is a network card driver software from Realtek Semiconductor Realtek, China. A security vulnerability exists in the Realtek rtl81xx SDK Wi-Fi Driver, which stems from insufficient validation of the N6CSetDOT11CIPHERDEFAULTKEY function, which could result in elevat...
Linux Distros Unpatched Vulnerability : CVE-2016-1000346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be us...
Malicious code in simple-api-key-validation (npm)
The package simple-api-key-validation was found to contain malicious code...