20658 matches found
MAL-2025-822 Malicious code in dgxeon-sokets (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-812 Malicious code in buildaurora (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-805 Malicious code in aurorabuilder (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-800 Malicious code in analytics-omniture-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-794 Malicious code in airflow-www (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-782 Malicious code in @transmit-security/rbac (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-780 Malicious code in @test6uy767/back-end (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-773 Malicious code in @metrics-service/static (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-767 Malicious code in @epic-ecp/types (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-754 Malicious code in @aftersale/react-eva (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in metamask-sdk-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BIT-GITLAB-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. GitLab was vulnerable to Server Side Request Forgery when an attacker uses a malicious URL in the markdown image...
PT-2025-5593 · Unknown · Pwn.College
Name of the Vulnerable Software and Affected Versions: pwn.college affected versions not specified Description: The issue is related to incorrect symlink checks on user-specified dojos, allowing users to perform a Local File Inclusion LFI from the CTFd container without requiring admin privileges...
GO-2025-3426 CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o
CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o...
GO-2025-3424 Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0 in github.com/Xe/x
Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0 in github.com/Xe/x. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...