13092 matches found
MAL-2024-12181 Malicious code in @hisdk/mail-mac (npm)
This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396c6b416f2f3b292fa9331c7d139c100af0b05e27f9f92ab265b9767c90ec41 Any computer that has this package installed or...
MAL-2024-11912 Malicious code in focal-examples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530 The OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Cross-site Scripting (XSS)
ibexa/admin-ui is vulnerable to a Cross-Site Scripting XSS. The vulnerability is due to improper sanitization in the Content name pattern mechanism, which is used to build Content names from one or more fields. Exploitation requires Content edit permissions, allowing an attacker to inject malicio...
CGA-7HQW-PW3H-MPXX
Bulletin has no description...
CGA-RX8G-M8QF-793X
Bulletin has no description...
CGA-98P4-C2RM-5276
Bulletin has no description...
PGHoard Path Traversal vulnerability
A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information...
CGA-HMH3-9H85-Q97C
Bulletin has no description...
MAL-2025-999 Malicious code in utilitypyfunc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaf64ae76493cf55c8b9e418bc3408f9e309b5c6a590a2ad528beb5ae8dbcc0 Importing the package starts the thread that gets and executes code from the remote server. The package description suggests a rather spam than malicious...
CGA-45C5-Q3W8-G43W
Bulletin has no description...
CGA-7HHH-3FR3-5FJQ
Bulletin has no description...
CGA-VC23-FWPW-MMH2
Bulletin has no description...
CGA-MVV3-XJV4-W9GC
Bulletin has no description...
CVE-2024-29646
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields...
SUSE: Security Advisory (SUSE-SU-2024:4327-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-H4P2-GF67-R7GM
Bulletin has no description...
CVE-2024-12664 ruifang-tech Rebuild Project Task Comment cross site scripting
A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-56003
Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through = 1.0.1...
CVE-2024-55982
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in richteam Share Buttons – Social Media rich-web-share-button allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through = 1.0.2...