44798 matches found
Malicious code in qagfypuewln (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8351 Malicious code in oaitsvnxpamle (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8312 Malicious code in oaipkesbgrrqn (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oaiix7984341 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8114 Malicious code in mytemptest1778551000 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in m8405v2llz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in m8403v1zxu (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lambbzrproxyoai (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eilhgtestfsmmg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7591 Malicious code in chmid8320x613915 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7590 Malicious code in chmid8310x612257 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7569 Malicious code in chatoaifetch177855557914 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7539 Malicious code in aizwhvgtkghn (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aiuzxgqioltv (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
PYSEC-2026-1645 Undefined Behavior in mlflow
A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service DoS as an authenticated user might not be able to use the intended model, as it will open a different model each time...
PYSEC-2026-1102 aiohttp Cross-site Scripting vulnerability on index pages for static file handling
Summary A XSS vulnerability exists on index pages for static file handling. Details When using web.static..., showindex=True, the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to XSS attacks...
Potential DoS via the Tudoor mechanism in eventlet and dnspython
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Issue:At ospdcommon.c, on the osdpreplyname function, any reply id between REPLYACK and REPLYXRD is valid, but names array do not declare all of the range. On a case of an undefined reply id within the range, name will be null name = namesreplyid - REPLYACK;. Null name will casue a crash on next...
Docassemble HTML and javascript injection
ImpactA user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The HTML can also contain...
Defining resource name as integer may give unintended access in vantage6
ImpactMalicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names.One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for...