4335 matches found
EUVD-2023-26556
Malicious code in bioql PyPI...
EUVD-2024-0403
Malicious code in bioql PyPI...
EUVD-2023-43148
Malicious code in bioql PyPI...
CVE-2025-52042
In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...
MAL-2025-47836 Malicious code in vite-next-logger (npm)
The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...
Malicious code in vite-next-logger (npm)
The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...
Malware in vite-next-logger
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Server-Side Request Forgery (SSRF)
Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the improper use of the next function without explicitly passing the request object, which allows an attacker to exploit incorrectly forwarded user-supplied headers in self-hosted applications...
Malicious code in next-optimized-image (npm)
The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...
Malware in next-optimized-image
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47563 Malicious code in next-optimized-image (npm)
The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...
nullcon Goa 2026 Call for Papers
The Call For Papers for nullcon Goa 2026 is now open. Nullcon is an information security conference held in Goa, India. The focus of the conference is to showcase the next generation of offensive and defensive security technology. It will take place February 28th through March 1st, 2026...
SUSE CVE-2025-55780
A null pointer dereference occurs in the function breakwordforoverflowwrap in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fzhtmlsplitflow to split a FLOWWORD node, but does not check if node-next is valid before accessing node-next-overflowwrap, resulti...
ROS-20250923-01
The vulnerability in the Python programming language interpreter CPython is due to the fact that Cpython does not prohibits setting an empty list "" for SSLContext.setnpnprotocols, which is an invalid value for the OpenSSL base API when using NPN. Exploitation of the vulnerability could allow an...
CVE-2025-55780
A null pointer dereference occurs in the function breakwordforoverflowwrap in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fzhtmlsplitflow to split a FLOWWORD node, but does not check if node-next is valid before accessing node-next-overflowwrap, resulti...
PT-2025-39197
Name of the Vulnerable Software and Affected Versions MuPDF version 1.26.4 Description A flaw exists in MuPDF where a null pointer dereference can occur within the break word for overflow wrap function when processing a malformed EPUB document. This happens because the function calls fz html spli...
Malicious Package
Overview next-plugin-uni-i18n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-47488 Malicious code in next-plugin-uni-i18n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf38f21fbce8422c8375fdbc547879dab7eea1a9773a78740cee14d4919f95ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in next-plugin-uni-i18n
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
