13092 matches found
MAL-2025-2827 Malicious code in @uniqa/ubimet-ms (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2756 Malicious code in ecko-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a46943965c7587fa7324d2b2470423dd46497cf100d65a55135a1a3c01ef79c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2023-53021
Bulletin has no description...
BELL-CVE-2023-53023
Bulletin has no description...
BELL-CVE-2023-52942
Bulletin has no description...
BELL-CVE-2023-52984
Bulletin has no description...
BELL-CVE-2023-53026
Bulletin has no description...
BELL-CVE-2023-52996
Bulletin has no description...
BELL-CVE-2023-52932
Bulletin has no description...
BELL-CVE-2023-52940
Bulletin has no description...
MAL-2025-2743 Malicious code in @takamol/qiwa-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afeca0176de89770761716c5f7c943d66f533995c20d1e3a4ed81f2a51f8f54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-28093
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2024-56975
InvoicePlane all versions tested as of December 2024 v.1.6.11 and before contains a remote code execution vulnerability in the uploadfile method of the Upload controller...
CVE-2025-28094
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places...
GHSA-WQ32-8RP4-W2MC Nethermind Juno Potential Denial of Service (DoS) via Integer Overflow
An integer overflow in Nethermind Juno before v0.12.5 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...
CVE-2023-53016 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix possible deadlock in rfcommskstatechange syzbot reports a possible deadlock in rfcommskstatechange 1. While rfcommsockconnect acquires the sk lock and waits for the rfcomm lock, rfcommsockrelease could have the...
CVE-2022-49745 fpga: m10bmc-sec: Fix probe rollback
In the Linux kernel, the following vulnerability has been resolved: fpga: m10bmc-sec: Fix probe rollback Handle probe error rollbacks properly to avoid leaks...
CVE-2023-52941 can: isotp: split tx timer into transmission and timeout
In the Linux kernel, the following vulnerability has been resolved: can: isotp: split tx timer into transmission and timeout The timer for the transmission of isotp PDUs formerly had two functions: 1. send two consecutive frames with a given time gap 2. monitor the timeouts for flow control frame...
