1699 matches found
EUVD-2023-33975
Malicious code in bioql PyPI...
EUVD-2025-18921
Malicious code in bioql PyPI...
EUVD-2023-30640
Malicious code in bioql PyPI...
EUVD-2025-9492
Malicious code in bioql PyPI...
EUVD-2025-3543
Malicious code in bioql PyPI...
EUVD-2024-45993
Malicious code in bioql PyPI...
EUVD-2023-44631
Malicious code in bioql PyPI...
EUVD-2023-45161
Malicious code in bioql PyPI...
EUVD-2022-39071
Malicious code in bioql PyPI...
EUVD-2023-32426
Malicious code in bioql PyPI...
EUVD-2024-42147
Malicious code in bioql PyPI...
CVE-2025-59686: Improper Authorization
Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...
CVE-2025-11069
CVE-2025-11069 (westboy CicadasCMS 1.0) affects the Add Department Handler: the vulnerability arises from manipulating the Name argument in the file /system/org/save, enabling cross-site scripting. The issue is exploitable remotely and, per multiple sources, the exploit has been publicly disclose...
Malicious Package
Overview @sev-ui-verse/feature-flag is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @aledade-org/dsi (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9097b2177de180fece5d0c6bcc6c630315777466732e173c20ca8b22bdd24dc0 Any computer that has this package installed or running should be considered...
Malicious code in aledade-org (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0682631cc0174823a4b9e6c15e0d9f83771e5a51dfaec02c64a878a3b0d6c56a The OpenSSF Package Analysis project identified 'aledade-org' @ 1.0.0...
MAL-2025-46995 Malicious code in aledade-org (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0682631cc0174823a4b9e6c15e0d9f83771e5a51dfaec02c64a878a3b0d6c56a The OpenSSF Package Analysis project identified 'aledade-org' @ 1.0.0...
Denial Of Service (DoS)
org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...