MAL-2025-15204 Malicious code in avior-cygnus-borealis-acamar (npm)

The package avior-cygnus-borealis-acamar was found to contain malicious code...

MAL-2025-12619 Malicious code in @zalastax/nolb-node-cw (npm)

The package @zalastax/nolb-node-cw was found to contain malicious code...

MAL-2025-18642 Malicious code in donotinstallthis (npm)

The package donotinstallthis was found to contain malicious code...

BELL-CVE-2025-38381

Bulletin has no description...

BELL-CVE-2024-43888

Bulletin has no description...

CVE-2023-41137

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server...

flat 安全漏洞

flat is a library from Hugh Kennedy's personal developer. It is used to take a nested Javascript object and flatten it, or to unflatten the object using the separator key. A security vulnerability exists in versions prior to flat 5.0.1, which stems from a problem with the unflatten function in th...

PT-2019-4740 · Simple Directmedia Layer +1 · Sdl +2

Name of the Vulnerable Software and Affected Versions: Simple DirectMedia Layer SDL version 2.0.9 SDL2 image version 2.0.4 Description: The issue is related to a heap-based buffer overflow in the IMG LoadPCX RW function, located in IMG pcx.c, which can lead to a denial of service. This overflow...

USN-3841-1 lxml vulnerability

It was discovered that lxml incorrectly handled certain HTML files. An attacker could possibly use this issue to conduct cross-site scripting XSS attacks...

OAuth authentication memory vulnerability caution a user identity hijacking-vulnerability warning-the black bar safety net

With OpenSSL, like OAuthOpen Authorizationas a widely used open-source third-party login authentication Protocol, this year also broke a security vulnerability. In the third session of the know the security Forum, from Sina Weibo of the blue di snowball shows Sina as early as year 3 months...