277976 matches found
Malicious code in sqzrframework480 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tescoutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64babfcdec855007803f08c8c8b149b06c85ff017430ddeec4a2c9aa90c0897e The package tescoutils was found to contain malicious code...
Malicious code in node-calculator-40ed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c441ec0a4c581ca44cdcc6dbd499ff4597bc1efa5111fd407759cfcc0c2ce729 The package node-calculator-40ed was found to contain malicious code...
Malicious code in node-calculator-190a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32e5086f5a10acce38971e5ccbf0edbf50a0027033b7b9e251dee1e0facd021 The package node-calculator-190a was found to contain malicious code...
Malicious code in jsonupon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e934753e8b8ee104342730e5c20c02ad4724c9fdfdf889ffa8e026d141133cdc The package jsonupon was found to contain malicious code...
Malicious code in elf-stats-piney-train-884 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5d7fab007202575b6530749e2abfbd33c64feb6f48560f2eca4e1bcda5d778 The package elf-stats-piney-train-884 was found to contain malicious code...
Malicious code in elf-stats-flickering-satchel-815 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bddef43e9f29ba6eb3c46d51307ea8ae938d432c3a31e0e0d8167fd08d4a88a The package elf-stats-flickering-satchel-815 was found to contain malicious code...
MAL-2025-192725 Malicious code in chai-pack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a153ef79c99f8b960c8e0557a16cb187571a31c3d4c2479e177ab630b36b6af6 The package chai-pack was found to contain malicious code...
Malicious code in @ownbackup/data-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3acf1c89fb017fc30245400cef31895f729d2be6f8bd843c98a43eede73062 The package @ownbackup/data-chart was found to contain malicious code...
EUVD-2023-60241
MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration...
DEBIAN-CVE-2025-68615
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and 5.10.pre2...
On the Effectiveness of Instruction-Tuning Local LLMs for Identifying Software Vulnerabilities
Large Language Models LLMs show significant promise in automating software vulnerability analysis, a critical task given the impact of security failure of modern software systems. However, current approaches in using LLMs to automate vulnerability analysis mostly rely on using online API-based LL...
📄 Institute Admission Software 2.5 SQL Injection
Institute Admission Software version 2.5 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Institute Admission Software 2.5 SQL INjection...
PDFsam Enhanced 缓冲区错误漏洞
PDFsam Enhanced is a PDF editing and management tool from PDFsam, Inc. PDFsam Enhanced suffers from a buffer error vulnerability that stems from a lack of validation of user-supplied data when processing App objects, which could lead to out-of-bounds reads and remote code execution...
PT-2025-52750
Name of the Vulnerable Software and Affected Versions Hotech Software Inc. Otello versions 2.4.0 through 2.4.3 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS condition. This allows for the...
Senstar Symphony 信息泄露漏洞
Senstar Symphony is an intelligent video management software from Senstar Canada. An information disclosure vulnerability exists in Senstar Symphony that stems from an improper implementation of the FetchStoredLicense method leading to an information disclosure that could reveal sensitive...
PT-2025-52771
Name of the Vulnerable Software and Affected Versions Home Assistant Core versions prior to 2025.8.0 Description The Downloader integration does not completely validate file paths when combining them, which creates a directory traversal issue. This allows unauthorized access to files outside the...
The vulnerability in the implementation of IPSec protocols for Cisco SD-WAN vEdge software allows a attacker to induce a service failure.
The vulnerability of the implementation of IPSec protocol-based microprogramming software for Cisco SD-WAN vEdge routers is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
