CVE-2025-22604

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

frozen 代码问题漏洞

frozen is an open source JSON parser and generator for C/C++ from Cesanta Software. A code issue exists in frozen versions prior to 1.7, which is caused by a null pointer dereference. An attacker exploiting this vulnerability could trigger a crash of a component embedded in the library by providi...

Cacti 操作系统命令注入漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from an operating system command injection vulnerability that...

PT-2025-1299

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.29 Cacti versions prior to 1.2.24+ds1-1+deb12u5 Cacti versions prior to 1.2.16+ds1-2+deb11u5 Description Cacti, a web interface for graphing of monitoring systems, contains a flaw in its multi-line SNMP result parse...

Malicious code in web3-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f572ff12e76b413beb79e843e9a403a5708b245f9f7ba85d18119e1074bf4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-582 Malicious code in web3-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f572ff12e76b413beb79e843e9a403a5708b245f9f7ba85d18119e1074bf4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-536 Malicious code in lyft-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13fc925730549bc8bae19b10ead0ff6155ab8448707c222dd7da50c4e7a014d6 The OpenSSF Package Analysis project identified 'lyft-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13fc925730549bc8bae19b10ead0ff6155ab8448707c222dd7da50c4e7a014d6 The OpenSSF Package Analysis project identified 'lyft-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-504 Malicious code in instacart-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5184795ac94ad2980f5b2eef95d313e8d6a2d491d42d3d3158a901aaf92d0bee The OpenSSF Package Analysis project identified 'instacart-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eca93207608d214136145d5d86c9fda0d83c29002132a2b488fd475aa6c10c8f The OpenSSF Package Analysis project identified 'iberia-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-491 Malicious code in iberia-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eca93207608d214136145d5d86c9fda0d83c29002132a2b488fd475aa6c10c8f The OpenSSF Package Analysis project identified 'iberia-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2df9297190fc6d92afa0a15ef9aa2f811bec45549ed97ef300efd4391a3fece4 The OpenSSF Package Analysis project identified 'epicagames-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-450 Malicious code in epicagames-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2df9297190fc6d92afa0a15ef9aa2f811bec45549ed97ef300efd4391a3fece4 The OpenSSF Package Analysis project identified 'epicagames-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-432 Malicious code in dropbox-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735b3889e77f86aa8d52f42e0f73bef75404c1f768f42f215c512b8476ad514 The OpenSSF Package Analysis project identified 'dropbox-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-421 Malicious code in coinbase-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e9b3add04221c71d7c4f8d36b9c03ab651121a7e205d0e29793bd2441f46b8a The OpenSSF Package Analysis project identified 'coinbase-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e9b3add04221c71d7c4f8d36b9c03ab651121a7e205d0e29793bd2441f46b8a The OpenSSF Package Analysis project identified 'coinbase-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74225c1da394fd78199ae89066b835fd86ed271ae51c1340505fe6eceb6e0263 The OpenSSF Package Analysis project identified 'bookingcom-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-403 Malicious code in bookingcom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74225c1da394fd78199ae89066b835fd86ed271ae51c1340505fe6eceb6e0263 The OpenSSF Package Analysis project identified 'bookingcom-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...