1298 matches found
EUVD-2018-8230
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414501)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414501 advisory. A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with ...
EUVD-2025-31058
Malicious code in bioql PyPI...
EUVD-2025-31018
Malicious code in bioql PyPI...
EUVD-2022-32825
Malicious code in bioql PyPI...
EUVD-2023-1481
Malicious code in bioql PyPI...
EUVD-2023-1273
Malicious code in bioql PyPI...
EUVD-2023-28265
Malicious code in bioql PyPI...
EUVD-2022-33593
Malicious code in bioql PyPI...
EUVD-2022-51759
Malicious code in bioql PyPI...
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
...
Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the torch.Tensor.random function when a model is compiled with Inductor. An attacker can cause the application to crash or become unresponsive by triggering a syntax error...
GHSA-R2RV-8PP3-65XW spmrc vulnerable to prototype pollution
spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...
CVE-2025-56819
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...
CVE-2025-56819
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...
CVE-2025-56819
The open-source data visualization platform Datart v1.0.0-rc.3 is vulnerable to Remote Code Execution (RCE) due to improper handling of the INIT connection parameter . A remote attacker can exploit this to execute arbitrary code, potentially leading to a full system compromise . Proof-of-concept ...
datart 安全漏洞
datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from improper handling of the INIT connection parameter and could lead to the execution of arbitrary code...
datart 安全漏洞
datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from mishandling of configuration files and can lead to path traversal and remote code execution...
