CVE-2025-60834

A fastjson deserialization vulnerability exists in uzy-ssm-mall v1.1.0 , an SSM framework used for building e-commerce and bookstore malls. The flaw occurs because the software improperly processes data during the conversion of JSON data into objects using the fastjson library. An attacker can pr...

EUVD-2010-0597

Malware in sbrugna...

EUVD-2023-30704

Malicious code in bioql PyPI...

EUVD-2025-14330

Malicious code in bioql PyPI...

EUVD-2022-43361

Malicious code in bioql PyPI...

EUVD-2025-15043

Malicious code in bioql PyPI...

EUVD-2025-10874

Malicious code in bioql PyPI...

EUVD-2025-15427

Malicious code in bioql PyPI...

EUVD-2022-43360

Malicious code in bioql PyPI...

EUVD-2022-43358

Malicious code in bioql PyPI...

EUVD-2022-43359

Malicious code in bioql PyPI...

EUVD-2025-10873

Malicious code in bioql PyPI...

EUVD-2022-33863

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3010 (ALAS-2025-3010)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3050.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3010 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: direnv, kafkaexporter, longhorn-instance-manager, metallb-fips, cass-operator, sftpgo-plugin-eventsearch, trust-manager, portieris, chart-testing-fips, flux-image-reflector-controller, terraform-provider-azapi-fips, tigera-operator-fips,...

CVE-2016-15046

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

CVE-2016-15046 Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...

PT-2025-31212 · Apache +1 · Apache Activemq +1

Name of the Vulnerable Software and Affected Versions: Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4 Description: A client-side remote code execution issue exists due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161...