767 matches found
NewStart CGSL MAIN 7.02 : nodejs Vulnerability (NS-SA-2025-0245)
The remote NewStart CGSL host, running version MAIN 7.02, has nodejs packages installed that are affected by a vulnerability: - Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input...
GHSA-QPM2-6CQ5-7PQ5 happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript
Summary The mitigation proposed in GHSA-37j7-fg3j-429f for disabling eval/Function when executing untrusted code in happy-dom does not suffice, since it still allows prototype pollution payloads. Details The untrusted script and the rest of the application still run in the same Isolate/process, s...
happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript
Summary The mitigation proposed in GHSA-37j7-fg3j-429f for disabling eval/Function when executing untrusted code in happy-dom does not suffice, since it still allows prototype pollution payloads. Details The untrusted script and the rest of the application still run in the same Isolate/process, s...
EUVD-2016-7715
Malware in sbrugna...
EUVD-2016-7716
Malware in sbrugna...
EUVD-2019-3855
Malware in sbrugna...
EUVD-2021-0530
Malware in sbrugna...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986306)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986306 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix bad pointer dereference when ehandler kthread is invalid Commit 66a834d09293 scsi...
EUVD-2022-6402
Malicious code in bioql PyPI...
EUVD-2024-3189
Malicious code in bioql PyPI...
CVE-2025-10016 Local Privilege Escalation in Sparkle Autoupdate Daemon
The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged attacker can request installation of crafted malicious PKG file by racing to connect to the daemon when other app spawns it as root. This results in local privilege...
Malicious code in nucleosynthesis-framework-metalsmith-spawn (npm)
The package nucleosynthesis-framework-metalsmith-spawn was found to contain malicious code...
MAL-2025-45367 Malicious code in nucleosynthesis-framework-metalsmith-spawn (npm)
The package nucleosynthesis-framework-metalsmith-spawn was found to contain malicious code...
Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm)
The package prettier-plugin-markdown-europa-spawn-csv was found to contain malicious code...
MAL-2025-43479 Malicious code in apex-spawn-typeorm-delphinus (npm)
The package apex-spawn-typeorm-delphinus was found to contain malicious code...
Malicious code in update-local-deneb-spawn (npm)
The package update-local-deneb-spawn was found to contain malicious code...
Malicious code in apex-spawn-typeorm-delphinus (npm)
The package apex-spawn-typeorm-delphinus was found to contain malicious code...
Malicious code in spawn-public-phenomic-promise (npm)
The package spawn-public-phenomic-promise was found to contain malicious code...