8902 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via org.Bouncycastle.Crypto.Fips.NativeLoader. An attacker can cause excessive resource allocation by deploying hybrid modules in multi-JVM environments, potentially leading to resour...
CVE-2025-9092
CVE-2025-9092 is an Uncontrolled Resource Consumption issue affecting Bouncy Castle for Java – BC-FJA 2.1.0 bc-fips (API modules), with the vulnerable component identified as org.Bouncycastle.Crypto.Fips.NativeLoader. Public sources (NVD/IBM bulletin) confirm the affected delivery from BC-FJA 2.1...
CVE-2025-9092 Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castl...
PT-2025-33545 · Unknown · Bouncy Castle For Java - Bc-Fja
Name of the Vulnerable Software and Affected Versions: Bouncy Castle for Java - BC-FJA versions 2.1.0 through 2.1.0 Description: An uncontrolled resource consumption issue exists in Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules that allows excessive allocation. The issue is associated...
Bouncy Castle Java security vulnerability
Bouncy Castle Java is a cryptographic algorithm program open-sourced by Legion of the Bouncy Castle Inc. A security vulnerability exists in Bouncy Castle Java version 2.1.0, which stems from a resource over-allocation issue in the org.Bouncycastle.Crypto.Fips.NativeLoader file...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
UAT-7237 targets Taiwanese web hosting infrastructure
Cisco Talos discovered UAT-7237, a Chinese-speaking advanced persistent threat APT group active since at least 2022, which has significant overlaps with UAT-5918. UAT-7237 conducted a recent intrusion targeting web infrastructure entities within Taiwan and relies heavily on the use of open-source...
MAL-2025-34117 Malicious code in style-loader-elara-protractor-csrf (npm)
The package style-loader-elara-protractor-csrf was found to contain malicious code...
Malicious code in less-loader-spectron-exoplanetology-phenomic (npm)
The package less-loader-spectron-exoplanetology-phenomic was found to contain malicious code...
Malicious code in geoarchaeology-vulcan-celeste-style-loader (npm)
The package geoarchaeology-vulcan-celeste-style-loader was found to contain malicious code...
Malicious code in sass-loader-eventhoriz-darkenergy-mongodb (npm)
The package sass-loader-eventhoriz-darkenergy-mongodb was found to contain malicious code...
Malicious code in oberon-css-loader-neptunology-auth0 (npm)
The package oberon-css-loader-neptunology-auth0 was found to contain malicious code...
Malicious code in singularity-ultra-style-loader-ionosphere (npm)
The package singularity-ultra-style-loader-ionosphere was found to contain malicious code...
MAL-2025-16701 Malicious code in cedrus-example-loader (npm)
The package cedrus-example-loader was found to contain malicious code...
MAL-2025-16786 Malicious code in changelog-fermion-less-loader-virgo (npm)
The package changelog-fermion-less-loader-virgo was found to contain malicious code...
MAL-2025-17561 Malicious code in cordelia-sass-loader-ignite-graphql (npm)
The package cordelia-sass-loader-ignite-graphql was found to contain malicious code...
MAL-2025-17705 Malicious code in cross-env-volcanology-less-loader-fetch (npm)
The package cross-env-volcanology-less-loader-fetch was found to contain malicious code...