178628 matches found
Malicious Package
Overview lusha-micro-app-messages is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview omnicore-ds2-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
GHSA-CPHF-4846-3XX9 vulnerabilities
Vulnerabilities for packages: keycloak, wildfly, spark, druid, apicurio-registry, strimzi-kafka-operator...
CVE-2026-1002 vulnerabilities
Vulnerabilities for packages: keycloak, wildfly, spark, druid, apicurio-registry, strimzi-kafka-operator...
CVE-2026-1002 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, druid, kafka-bridge, wildfly, knative-kafka-broker-fips, kafka-bridge-fips, spark, apicurio-registry, knative-kafka-broker, spark-fips, keycloak, keycloak-fips...
GHSA-CPHF-4846-3XX9 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, druid, kafka-bridge, wildfly, knative-kafka-broker-fips, kafka-bridge-fips, spark, apicurio-registry, knative-kafka-broker, spark-fips, keycloak, keycloak-fips...
Malicious Package
Overview flip-prx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview admin1001 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
PT-2026-3326
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The Microsoft Edge Elevation Service has a design flaw where a privileged COM interface does not properly check the permissions of the process making the request. A standard local user...
CVE-2025-12053
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12052
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12050
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12052
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053 egwindrvx64.sys is potentially vulnerable to a buffer overflow
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053
CVE-2025-12053 describes a buffer overflow in drivers within tool packages caused by using RTL_QUERY_REGISTRY_DIRECT to read a registry value. An untrusted user-mode application could trigger overflow, with local access required (CTL: LOW privileges) and no user interaction. Public references (NV...
CVE-2025-12052
CVE-2025-12052 is described across multiple sources as a local-buffer-overflow vulnerability stemming from drivers in tool packages reading registry values using RTL_QUERY_REGISTRY_DIRECT. Affected component is the driver (egwindrv.sys) or related kernel/tool drivers, with the untrusted applicati...