52 matches found
codetotal
CodeTotal CodeTotal analiza cualquier fragmento , archivo o repositorio para detectar posibles fallos de seguridad como secretos en código , vulnerabilidades de código abierto , seguridad del código , , insegura, y posibles con licencias de código abierto...
CVE-2025-65720
A critical command injection vulnerability in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system. The root cause is a "by design" weakness in the Model Context Protocol (MCP) architecture, specifically involving unsafe defaults in how configuration...
OESA-2026-2798 nginx security update
NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpproxyv2module and ngxhttpgrpcmodule modules. This vulnerability exists when the proxyhttpversion ...
@theia/ai-chat-ui (>=1.46.0-next.241, <=1.70.2), @theia/ai-claude-code (>=1.65.0, <=1.70.2) +8 more potentially affected by CVE-2026-22551 via @theia/ai-chat (>=1.46.0-next.241, <=1.70.2)
@theia/ai-chat NPM version =1.46.0-next.241, =1.46.0-next.241, =1.65.0, =1.67.0-next.56, =0.0.1, =1.62.0, =1.59.0-next.62, =1.57.0-next.37, =1.46.0-next.241, =1.46.0-next.241, =1.58.5 Source cves: CVE-2026-22551 Source advisory: SNYK:JS-THEIAAICHAT-17391864...
sbom-risk-analyzer
SBOM-Risk-Analyzer Exploitability-weighted vulnerability pri...
Fleet 安全漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, and MDM operations. Versions of Fleet prior to 4.82.0 contained security...
CVE-2026-3497
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpktdisconnect on an error, which does not terminate the...
CVE-2026-24418
creationtimestamp| type| source ---|---|--- 2026-02-06 16:47:32+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4xwv-49c8-fvhq 2026-06-29 18:55:45+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116834915504542283...
vLLM code issues and vulnerabilities
vLLM is an open-source solution designed for LLM-based models, featuring high throughput and memory-efficient reasoning and service engines. Prior to vLLM 0.14.1, there were code-related vulnerabilities. These vulnerabilities stemmed from differences in the interpretation of backslashes by variou...
iccDEV 代码问题漏洞
iccDEV is an open source color configuration code library from the International Color Consortium ICC. A code issue vulnerability exists in iccDEV 2.3.1 and earlier versions, which stems from an integer overflow and underflow in the CIccXmlArrayType::ParseTextCountNum function, which could lead t...
EUVD-2004-2064
Malware in sbrugna...
EUVD-2023-2122
Malicious code in bioql PyPI...
EUVD-2023-36563
Malicious code in bioql PyPI...
EUVD-2024-39288
Malicious code in bioql PyPI...
EUVD-2021-32813
Malicious code in bioql PyPI...
EUVD-2023-2211
Malicious code in bioql PyPI...
EUVD-2023-2334
Malicious code in bioql PyPI...
CVE-2025-54812
creationtimestamp| type| source ---|---|--- 2025-08-22 16:22:58+00:00| seen| https://seclists.org/oss-sec/2025/q3/134 2025-08-22 18:48:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwz4ocotud2y 2025-08-22 19:01:44+00:00| seen|...
OSV-2025-631 Null-dereference READ in [email protected]
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438264629 Crash type: Null-dereference READ Crash state: [email protected]...
CVE-2025-53938
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows unauthenticated...