5970 matches found
MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2022-55678
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...
CVE-2025-60700
CVE-2025-60700 (D-Link DIR-882) affects DIR-882 routers running DIR882A1_FW102B02 and later?in the provided docs, the vulnerability lies in prog.cgi and librcm.so. The sub_4455BC function stores user-supplied SetDMZSettings/IPAddress values in NVRAM then DMZ_run reads them, concatenates them into...
ROS-20251113-01
A vulnerability in the Omnibox component of the Google Chrome and Microsoft Edge browsers is related to writing outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges A vulnerability in the Safe Browsing compone...
CVE-2025-40168
The CVE-2025-40168 issue affects the Linux kernel in the smc_clc_prfx_match() function (net/smc/smc_clc.c); it can cause a use-after-free when dst_entry is handled outside RCU/RTNL. The recommended fix is to use __sk_dst_get() and dst_dev_rcu() to obtain the destination device. The vulnerability ...
CVE-2025-40168 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in smcclcprfxmatch. smcclcprfxmatch is called from smclistenwork and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the returned value o...
CVE-2025-40154
The CVE-2025-40154 entry concerns the ASoC: Intel bytcr_rt5640 driver. The vulnerability arises from an invalid quirk input mapping; when an invalid value is passed, the driver previously reported an error but retained the input, potentially causing out-of-bounds (OOB) access. A fix in the Linux ...
Malicious code in dotenv-safe-hermes-config-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120875
Malicious code in ursa-dotenv-safe-nconf-pm2 npm...
EUVD-2025-111956
Malicious code in kaus-umbra-dotenv-safe-version npm...
Malicious code in dorado-local-dotenv-safe-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120563
Malicious code in webdriverio-dotenv-safe-andromeda-cache npm...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
EUVD-2025-122936
Malicious code in query-winston-taurus-dotenv-safe npm...
Malicious code in gravity-dotenv-safe-quark-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113932
Malicious code in eris-nightwatch-axios-dotenv-safe npm...
EUVD-2025-114343
Malicious code in dotenv-safe-npm-json-chromedriver npm...
EUVD-2025-123529
Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...