28307 matches found
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
CVE-2025-13047
CVE-2025-13047 affects the ViewLead Technology Bacteriology Laboratory Reporting System. The vulnerability is a SQL Injection that allows unauthenticated remote attackers to inject arbitrary SQL and read database contents. Root cause and exact vulnerable component are described as an injection fl...
EUVD-2025-119986
Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-13047
...
EUVD-2025-124143
Malicious code in octans-release-it-carina-query npm...
Malicious code in convict-jsonp-query-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115023
Malicious code in convict-query-nodejs-prettier npm...
EUVD-2025-122957
Malicious code in query-deimos-semantic-ui-procyon npm...
Malicious code in convict-query-nodejs-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114892
Malicious code in cosmos-query-wezen-repository npm...
EUVD-2025-111536
Malicious code in luna-query-hyperion-cordelia npm...
EUVD-2025-122198
Malicious code in scripts-arcturus-capella-query npm...
EUVD-2025-122347
Malicious code in sadr-query-phoenix-configstore npm...
EUVD-2025-124592
Malicious code in nconf-query-browserify-protractor npm...
EUVD-2025-122951
Malicious code in query-lint-staged-library-jasmine npm...
Malicious code in gridsome-auriga-hugo-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123380
Malicious code in private-semantic-ui-lynx-query npm...
Malicious code in luna-query-hyperion-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...