617 matches found
EUVD-2025-21624
Malicious code in bioql PyPI...
EUVD-2022-26968
Malicious code in bioql PyPI...
EUVD-2022-30597
Malicious code in bioql PyPI...
EUVD-2024-26077
Malicious code in bioql PyPI...
EUVD-2022-5624
Malicious code in bioql PyPI...
EUVD-2024-19588
Malicious code in bioql PyPI...
CryptOracle: A Modular Framework to Characterize Fully Homomorphic Encryption
Privacy-preserving machine learning has become an important long-term pursuit in this era of artificial intelligence AI. Fully Homomorphic Encryption FHE is a uniquely promising solution, offering provable privacy and security guarantees. Unfortunately, computational cost is impeding its mass...
Bolt before 3.3.6 does not properly restrict access to _profiler routes
...
PT-2026-3235
Apache bRPC and Affected Versions Apache bRPC versions prior to 1.15.0 Description Apache bRPC contains a remote command injection flaw in the heap profiler built-in service. The /pprof/heap endpoint does not properly validate the extra options parameter, allowing attackers to execute arbitrary...
CVE-2025-10597
CVE-2025-10597 affects kidaze CourseSelectionSystem: SQL injection via cname in /Profilers/PriProfile/COUNT2.php. Remote attack possible; vulnerable for versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 (per connected PT-2025-38221). Recommendations include sanitizing the cname parameter...
Linux Distros Unpatched Vulnerability : CVE-2024-35231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to...
The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 123.
...
An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.
...
Malicious code in g-profiler (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41571 Malicious code in g-profiler (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in statsd-jvm-profiler-dash (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1641c5f88ba5a2747c3768eb890f4e8ec38765b0e706615a116369a1b27e86f8 The OpenSSF Package Analysis project identified...
MAL-2025-6958 Malicious code in statsd-jvm-profiler-dash (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1641c5f88ba5a2747c3768eb890f4e8ec38765b0e706615a116369a1b27e86f8 The OpenSSF Package Analysis project identified...
MAL-2025-31823 Malicious code in react-native-performance-lists-profiler (npm)
The package react-native-performance-lists-profiler was found to contain malicious code...