Lucene search
+L

43280 matches found

Microsoft CVE
Microsoft CVE
added 2026/01/06 9:01 a.m.12 views

staging: most: remove broken i2c driver

...

5.5CVSS5.3AI score0.00167EPSS
SaveExploits0
OSV
OSV
added 2026/01/06 3:58 a.m.12 views

MAL-2026-70 Malicious code in @shop-cicd/webpack-package-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee6154f54d35f10e1bca4b64111deef6ab6c43c9ea291a7adfac091b7334ab0 The package @shop-cicd/webpack-package-artifact was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/06 3:37 a.m.8 views

Malicious Package

Overview usaa-authentication-mocks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/06 3:37 a.m.8 views

Malicious Package

Overview ugc-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/06 3:37 a.m.5 views

Malicious Package

Overview api-umbrella-admin-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/06 3:37 a.m.7 views

Malicious Package

Overview ing-feat-ui-image is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/06 2:33 a.m.4 views

Malicious Package

Overview oj-sp-css-additions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2026/01/06 2:33 a.m.8 views

MAL-2026-63 Malicious code in oj-sp-common-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c112d75458c1c8c9af95739b5a983b3617fbb578a147933a3d4cab77360dc4 The package oj-sp-common-util was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/06 2:33 a.m.5 views

MAL-2026-61 Malicious code in oj-sp-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192506d43fafb67a79ea826406a174aa2d05bfc74c3df203366e1ec7cdce0af The package oj-sp-common was found to contain malicious code. Source: ghsa-malware 0321cb6ed931a42d70b5f2e4cf235b07bd7ce205d6781729c28cfe5475a1ad9b A...

6.8AI score
SaveExploits0References1
NVD
NVD
added 2026/01/06 1:16 a.m.18 views

CVE-2025-68954

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to...

7.5CVSS0.00231EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/06 12:31 a.m.51 views

CVE-2025-68954

CVE-2025-68954 affects Pterodactyl’s SFTP subsystem where active SFTP sessions are not revoked when a user is removed or has permissions reduced. Multiple sources describe that credentials are checked at handshake, but not re-validated afterward, allowing a user who was connected to maintain acce...

7.5CVSS6.4AI score0.00231EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2026/01/06 12:31 a.m.10 views

CVE-2025-68954 Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to...

7.5CVSS6.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/06 12:31 a.m.42 views

CVE-2025-68954 Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to...

7.5CVSS0.00231EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/06 12:31 a.m.4 views

CVE-2025-68954 Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows a user that was already connected to...

7.5CVSS6.4AI score0.00231EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/01/06 12:24 a.m.7 views

SUSE CVE-2025-68755

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...

5.5CVSS6.4AI score0.00167EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/06 12:00 a.m.10 views

PT-2026-1360

Name of the Vulnerable Software and Affected Versions Pterodactyl versions prior to 1.12.0 Description Pterodactyl, a game server management panel, does not terminate existing SFTP connections when a user's access is revoked or their permissions are modified. Specifically, if a user is connected ...

7.5CVSS6.5AI score0.00231EPSS
SaveExploits0
NVD
NVD
added 2026/01/05 10:15 a.m.11 views

CVE-2025-68758

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It...

0.00175EPSS
SaveExploits0References8
NVD
NVD
added 2026/01/05 10:15 a.m.14 views

CVE-2025-68755

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...

0.00167EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/01/05 10:15 a.m.12 views

CVE-2025-68758

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It...

5.7AI score0.00175EPSS
SaveExploits0References36
OSV
OSV
added 2026/01/05 10:15 a.m.12 views

UBUNTU-CVE-2025-68755

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...

5.7AI score0.00167EPSS
SaveExploits0References26
Rows per page
Query Builder