928 matches found
Vulnerability in expr-eval JavaScript library can lead to arbitrary code execution
Overview The npm package expr-eval is a JavaScript library that evaluates mathematical expressions and is used in various applications, including NLP and AI. A vulnerability in this library has been disclosed that could allow arbitrary code execution by an attacker using maliciously crafted input...
CVE-2025-34294
...
PT-2025-44187
Name of the Vulnerable Software and Affected Versions Wazuh affected versions not specified Description A time-of-check/time-of-use TOCTOU race condition exists in the File Integrity Monitoring FIM component when automatic threat removal is enabled. This can allow a local, low-privileged attacker...
Metasploit Wrap-Up 10/24/2025
Let us suggest persistence… This week's edition brings the new persistence suggester from h00die. Similar to the exploit variant, this module will list the available persistence mechanisms for your selected target. The module requires a session to target the machine, so it can run check methods...
GHSA-JFX9-29X2-RV3J pypdf can exhaust RAM via manipulated LZWDecode streams
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider applying the changes from P...
A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises
Lack of memory safety is such a predominant cause of security issues that we have a responsibility as professional software engineering to robustly mitigate it in security-sensitive use cases—by using memory safe languages. Similarly, I have the growing impression that software supply chain...
EUVD-2021-19580
Malware in sbrugna...
EUVD-2021-18778
Malware in sbrugna...
EUVD-2022-45037
Malicious code in bioql PyPI...
EUVD-2025-28133
Malicious code in bioql PyPI...
EUVD-2021-9998
Malicious code in bioql PyPI...
EUVD-2024-35854
Malicious code in bioql PyPI...
EUVD-2022-6338
Malicious code in bioql PyPI...
EUVD-2024-42300
Malicious code in bioql PyPI...
EUVD-2025-31664
Malicious code in bioql PyPI...
EUVD-2022-3278
Malicious code in bioql PyPI...
EUVD-2023-0443
Malicious code in bioql PyPI...
EUVD-2025-20825
Malicious code in bioql PyPI...