6190 matches found
MONAI: Unsafe torch usage may lead to arbitrary code execution
Summary In modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when...
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
Denial Of Service (DoS)
org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...
TinyEnv 安全漏洞
TinyEnv is an environment variable loader for Dat Duy Personal Developer. A security vulnerability exists in TinyEnv versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, which stems from a checking deficiency in the .env file that could lead to unsafe default configurations...
CVE-2025-32321
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-9365
Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code...
Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)
The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...
Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)
The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...
Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
Malicious code in aether-venus-lacerta-less-loader (npm)
The package aether-venus-lacerta-less-loader was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)
The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...
Malicious code in webdriver-manager-plutology-postcss-loader-meissa (npm)
The package webdriver-manager-plutology-postcss-loader-meissa was found to contain malicious code...
Malicious code in hercules-grus-css-loader-package (npm)
The package hercules-grus-css-loader-package was found to contain malicious code...
MAL-2025-44989 Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm)
The package less-loader-quasar-spectroscopy-astrobiology was found to contain malicious code...
MAL-2025-43523 Malicious code in astro-postcss-loader-grunt-selenium (npm)
The package astro-postcss-loader-grunt-selenium was found to contain malicious code...
MAL-2025-44988 Malicious code in less-loader-ablation-frontend-transport (npm)
The package less-loader-ablation-frontend-transport was found to contain malicious code...
MAL-2025-43493 Malicious code in archaeometry-hercules-singularitarianism-style-loader (npm)
The package archaeometry-hercules-singularitarianism-style-loader was found to contain malicious code...