Lucene search
K

39 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/28 10:21 a.m.5 views

Malicious code in wm-plugin-teach-me-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8892d058e7f10e304a86eea230ef7fa8fbf9a76da1d09b60f5498305690d4bc The package wm-plugin-teach-me-widget was found to contain malicious code. Source: ghsa-malware...

5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/11/11 5:16 p.m.3 views

CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122)

Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-1067

Malware in sbrugna...

5.8CVSS5.8AI score0.00227EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/21 6:24 a.m.3 views

Malicious code in synckit (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

6.9AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.3 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS6.4AI score0.00194EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/11/12 7:15 p.m.1 views

CVE-2024-47456

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim mu...

5.5CVSS5.8AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS6.4AI score0.00289EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS8AI score0.00289EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

7.8CVSS6.4AI score0.00289EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.1 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of the current user, using a specially create...

7.8CVSS8AI score0.00273EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.1 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially creat...

7.8CVSS6.4AI score0.00273EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.2 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to access to an uninitialized pointer, allowing a malicious actor to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information through a specially created malware file...

3.3CVSS5.3AI score0.0004EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.1 views

The vulnerability of Adobe Audition, related to access to an uninitialized pointer, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Adobe Audition relates to access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially created malware file...

5.5CVSS5.5AI score0.00028EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.1 views

The vulnerability of the AcroForm component in the PDF viewer software from Foxit PDF Reader allows a hacker to execute arbitrary code.

The vulnerability of the AcroForm component in the PDF viewer software from Foxit PDF Reader relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially...

3.3CVSS6.6AI score0.00314EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.2 views

The vulnerability of the PDF viewer software in Foxit PDF Reader, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF viewer software in Foxit PDF Reader relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially created malware file...

3.3CVSS6.6AI score0.00314EPSS
Exploits0References4Affected Software1
The Hacker News
The Hacker News
added 2023/04/28 6:44 a.m.52 views

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team. "Recent cases have revealed that the group is using a file related to anti-malware products to ultimately execu...

6.8AI score
Exploits0
The Hacker News
The Hacker News
added 2023/04/28 6:44 a.m.2 views

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team. "Recent cases have revealed that the group is using a file related to anti-malware products to ultimately execu...

6.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.1 views

The vulnerability of the Windows operating system’s kernel, allowing a hacker to execute arbitrary code

The vulnerability of Windows operating system kernels is related to insufficient processing of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.8AI score0.01951EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory when processing USDC files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malware file or a specially created...

7.8CVSS8AI score0.00097EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.1 views

The vulnerability in the web interface for managing FatPipe’s software allows a hacker to execute arbitrary code.

The vulnerability of the FatPipe software management web interface is related to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malware file...

10CVSS8.1AI score0.39661EPSS
Exploits2References5Affected Software3
Rows per page
Query Builder