Lucene search
K

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/26 1:12 a.m.7 views

Malicious code in wao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f809db41305575dc4eeed6726bdc75000e7f083dee4599ad71fd7b5eb89b2501 package.json declares "preinstall": "./src/deps.ts", but src/deps.ts is not TypeScript — it is a 976KB Linux x86-64 ELF executable magic bytes...

6AI score
Exploits0References1
OSV
OSV
added 2026/05/26 12:59 a.m.3 views

MAL-2026-4480 Malicious code in aonote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df30872a579b6ce2419993ff9bad621f42347097dd43551a26583223e6a98a7b package.json declares "preinstall": "./scripts/postbuild", where scripts/postbuild is a 976KB UPX-packed Linux x86-64 ELF sha256 36abd242... shipped ...

6AI score
Exploits0References1
OSV
OSV
added 2026/04/24 8:45 p.m.0 views

GHSA-8X35-HPH8-37HQ electerm has Command Injection via runLinux funtion

Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an exec"rm -r...

9.8CVSS6.1AI score0.00753EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.1 views

SUSE CVE-2004-0907

The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code...

4.6CVSS7AI score0.00096EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2010/02/19 12:0 a.m.26 views

RedHat Update for NetworkManager RHSA-2010:0108-01

Check for the Version of NetworkManager OpenVAS Vulnerability Test RedHat Update for NetworkManager RHSA-2010:0108-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

6.8CVSS6.5AI score0.01278EPSS
Exploits0References2
Cvelist
Cvelist
added 2004/09/24 4:0 a.m.16 views

CVE-2004-0907

The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code...

6.8AI score0.00096EPSS
Exploits0References4
Rows per page
Query Builder