829 matches found
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gain elevated privileges by exploiting the way the system resolves links, potentially accessing or modifying files with higher permissions...
Symlink Attack
Overview Microsoft.Build.Tasks.Core is a This package contains the Microsoft.Build.Tasks assembly which implements the commonly used tasks of MSBuild. Affected versions of this package are vulnerable to Symlink Attack via improper handling of symbolic links before file access. An attacker can gai...
Incorrect Execution-Assigned Permissions
Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions via the process responsible for executing system commands. An attacker can execute arbitrary commands on the server by sending crafted requests after authentication. Remediation A fix was pushed...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the reindex request due to redacting certain fields from the body of rest requests in audit logs. An attacker can obtain sensitive information by triggering audit logs that capture...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfx8664relocatesection function. An attacker can cause a heap-based buffer overflow by providing specially crafted input files during the linking process. Remediation A fix was pushed into the master...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the bfdx86elflatesizesections function. An attacker can cause a denial of service by triggering an out-of-bounds read through local access. Remediation A fix was pushed into the master branch but not yet published...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the bfdelfgcrecordvtentry function. An attacker can cause a denial of service by providing specially crafted input files that trigger an out-of-bounds read during the linking process. Remediation A fix was pushed...
Server-side Request Forgery (SSRF)
Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processrequest function, which processes incoming content URLs without proper validation or sanitization. An attacker can access internal...
Interpretation Conflict
Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict due to improper handling of quoted local-parts containing @. An attacker can cause emails to be sent to unintended...
EUVD-2021-15056
Malware in sbrugna...
Improper Neutralization of Null Byte or NUL Character
Overview Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the handling of URIs in ssh://. An attacker can inject shell expressions into command-line constructor by supplying URIs containing \0 characters. This is only exploitable if URI...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the dwauncompress function when decoding OpenEXR files with DWAA or DWAB compression and the image height or width is not divisible by 8. An attacker can cause memory corruption or potentially execute arbitrary co...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the parsing process of DHAV file headers due to an integer underflow in offset calculation, which allows reading memory before the start of the allocated buffer. An attacker can cause out-of-bounds memory reads by...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the processftch function when handling SANM animation files with subversion less than 2. An attacker can achieve arbitrary memory write and potentially corrupt memory allocator metadata by crafting a file that triggers...
EUVD-2023-41063
Malicious code in bioql PyPI...
EUVD-2021-30424
Malicious code in bioql PyPI...
EUVD-2025-25686
Malicious code in bioql PyPI...
EUVD-2025-25685
Malicious code in bioql PyPI...