5862 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-3876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the...
CVE-2025-59037
CVE-2025-59037 covers DuckDB npm packages where four Node.js packages were briefly compromised with malware: @duckdb/[email protected], @duckdb/[email protected], [email protected], and @duckdb/[email protected]. The malicious versions attempted to interfere with cryptocurrency transactions. DuckDB de...
copyparty: Sharing a single file does not fully restrict access to other files in source folder
There was a missing permission-check in the shares feature the shr global-option. When a share is created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. It was not possible to descend into subdirectories in this manner;...
DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware
The DuckDB distribution for Node.js on npm was compromised with malware along with several other packages. An attacker published new versions of four of duckdb’s packages that included malicious code to interfere with cryptocoin transactions. The following packages and versions are affected: -...
MAL-2025-46993 Malicious code in @duckdb/node-bindings (npm)
The DuckDB Node.js package @duckdb/node-bindings version 1.3.3 was compromised with malware through a sophisticated phishing attack targeting the DuckDB maintainers. An attacker created a pixel-perfect copy of the npmjs.com website at npmjs.help domain and tricked a maintainer into logging in and...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...
drm/xe: Make dma-fences compliant with the safe access rules
...
CVE-2025-39673 ppp: fix race conditions in ppp_fill_forward_path
In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in pppfillforwardpath pppfillforwardpath has two race conditions: 1. The ppp-channels list can change between listempty and listfirstentry, as ppplock is not held. If the only channel is deleted in...
Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm)
The package parsec-sociobiology-dotenv-safe-neutronstar was found to contain malicious code...
Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
Malicious code in magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy (npm)
The package magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy was found to contain malicious code...
MAL-2025-45508 Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm)
The package parsec-sociobiology-dotenv-safe-neutronstar was found to contain malicious code...
Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm)
The package metalsmith-node-config-dotenv-safe-bellatrix was found to contain malicious code...
Malicious code in dotenv-safe-sedna-procyon-halley (npm)
The package dotenv-safe-sedna-procyon-halley was found to contain malicious code...
Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)
The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...
Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)
The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...
Malicious code in tailwindcss-tailwindcss-dotenv-safe-less-loader (npm)
The package tailwindcss-tailwindcss-dotenv-safe-less-loader was found to contain malicious code...
Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)
The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...