1728 matches found
Malicious code in like-green-rooster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecae3c0a4fb367b20a13645a16a2f5c704bbf04448166dcc860afb7bb10864d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69147 Malicious code in like-green-rooster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecae3c0a4fb367b20a13645a16a2f5c704bbf04448166dcc860afb7bb10864d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53500
Malicious code in like-maroon-wren npm...
EUVD-2025-53502
Malicious code in like-green-rooster npm...
EUVD-2025-49912
Malicious code in likeamphibianz3n npm...
EUVD-2025-46634
Malicious code in likecatz3n npm...
[SECURITY] Fedora 42 Update: qt5-qtx11extras-5.15.18-1.fc42
The X11 Extras module provides features specific to platforms using X11, e.g. Linux and UNIX-like systems including embedded Linux systems that use the X Window System...
[SECURITY] Fedora 42 Update: qadwaitadecorations-0.1.7-2.fc42
Qt decoration plugin implementing Adwaita-like client-side decorations...
CVE-2025-60784
A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the /topfirst.php Pay module, enabling unauthorized discounts. By sending a crafted HTTP POST request with zhekou set to an abnormally low value, an attacker can purchase...
[SECURITY] Fedora 43 Update: rust-attribute-derive-0.10.5-1.fc43
Clap like parsing for attributes in proc-macros...
[SECURITY] Fedora 43 Update: python-cron-converter-1.2.2-1.fc43
Cron-converter provides a Cron string parser from string/lists to string/lists and iteration for the datetime object with a cron like format...
XiaozhangBang Voluntary Like System 安全漏洞
XiaozhangBang Voluntary Like System is a software program from XiaozhangBang, a Chinese company. A security vulnerability exists in XiaozhangBang Voluntary Like System version V8.8, which stems from insufficient server-side validation of the parameters zhekou and zid in the file /topfirst.php,...
PT-2025-45162
Name of the Vulnerable Software and Affected Versions XiaozhangBang Voluntary Like System version 8.8 Description A flaw exists in the XiaozhangBang Voluntary Like System version 8.8 that allows remote attackers to manipulate the zhekou parameter within the /topfirst.php Pay module. By sending a...
EUVD-2025-37929
A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to manipulate the zhekou parameter in the /topfirst.php Pay module, enabling unauthorized discounts. By sending a crafted HTTP POST request with zhekou set to an abnormally low value, an attacker can purchase...
CVE-2025-60784
Summary : CVE-2025-60784 affects XiaozhangBang Voluntary Like System V8.8. The vulnerable component is the Pay module function in the /topfirst.php endpoint, where the server fails to validate parameters. Impact : remote attackers can set zhekou to an abnormally low value to buy votes at reduced ...
[SECURITY] Fedora 42 Update: rust-attribute-derive-0.10.5-1.fc42
Clap like parsing for attributes in proc-macros...
[SECURITY] Fedora 41 Update: rust-attribute-derive-0.10.5-1.fc41
Clap like parsing for attributes in proc-macros...
UBUNTU-CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
