Improper Input Validation

github.com/nyaruka/phonenumbers is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of syntactic correctness in the phonenumbers.Parse function, which allows an attacker to provide crafted input and cause a panic resulting in a “runtime error: slice...

EUVD-2025-179943

Malicious code in bundle-alert-runtime-private-bundle npm...

EUVD-2025-178899

Malicious code in finally-function-boolean-refactor-runtime npm...

EUVD-2025-176578

Malicious code in runtime-promise-assert-async-serialize npm...

EUVD-2025-180124

Malicious code in bash-runtime-log-static-java npm...

EUVD-2025-175846

Malicious code in uglify-zeta-tree-delta-runtime npm...

EUVD-2025-177467

Malicious code in omega-xml-proxy-runtime-analyze npm...

EUVD-2025-180010

Malicious code in book-earth-runtime-delta-chi npm...

EUVD-2025-176575

Malicious code in runtime-void-resolve-assert-public npm...

EUVD-2025-179922

Malicious code in byte-runtime-easy-promise-transpile npm...

EUVD-2025-179593

Malicious code in container-async-awk-zeta-runtime npm...

EUVD-2025-176576

Malicious code in runtime-stack-awk-visualize-monitor npm...

EUVD-2025-176693

Malicious code in report-new-runtime-sun-user npm...

MAL-2025-188312 Malicious code in node-mu-private-new-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8937b05c71005082adf7bc0bad95bdc9dc7074cc69262f27f317a80070db28f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177570

Malicious code in node-mu-private-new-runtime npm...

EUVD-2025-179710

Malicious code in cloud-class-stack-xml-runtime npm...

EUVD-2025-176577

Malicious code in runtime-short-fork-yaml-pipe npm...

EUVD-2025-180013

Malicious code in book-boolean-runtime-grep-root npm...

EUVD-2025-150366

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

AFLGopher: Accelerating Directed Fuzzing Via Feasibility-Aware Guidance

Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate th...