Lucene search
+L

25617 matches found

Github Security Blog
Github Security Blog
•added 2026/05/25 8:48 a.m.•5 views

Malware in unique-string-64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/05/25 8:48 a.m.•31 views

MAL-2026-4332 Malicious code in unique-string-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13681b6b78ec7996b99f0b0404fe78f1deb2235a379314856002f8f3ec02501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/05/25 8:48 a.m.•26 views

Malicious Package

Overview unique-string-64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/25 8:48 a.m.•29 views

Malicious code in unique-string-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13681b6b78ec7996b99f0b0404fe78f1deb2235a379314856002f8f3ec02501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•9 views

CVE-2026-47075: Improper Neutralization of CRLF Sequences

Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting. hackney does not percent-encode carriage return \r or line feed \n characters in the URL query component before constructing the HTTP/1.1 request target. Characters outside the grammar define...

7.5CVSS5.9AI score0.00479EPSS
SaveExploits1References7
osv_clsa
osv_clsa
•added 2026/05/22 11:51 p.m.•40 views

CLSA-2026-1779493861 postgresql: Fix of 6 CVEs

CVE-2026-6473: use pallocarray in hstoreplperl/hstoreplpython to avoid integer overflow on 32-bit systems - CVE-2026-6474: guard pgstrftime callers against unsafe conditions and ensure null-terminated output to prevent format-string leak via crafted timezone names - CVE-2026-6475: prevent path...

8.8CVSS6.6AI score0.01006EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/05/22 9:03 p.m.•153 views

Reversing-Toolkit

Reversing Toolkit 🔧 3 reverse engineering & binary exploita...

6AI score
SaveExploits0
NVD
NVD
•added 2026/05/22 8:16 p.m.•43 views

CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS0.00114EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•25 views

AZL-87164 CVE-2026-39824 affecting package buildah 1.43.1-3

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•29 views

AZL-87161 CVE-2026-39824 affecting package azl-otel-collector 0.127.0-1

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•21 views

AZL-87269 CVE-2026-39824 affecting package kata-containers-preview 3.27.0~preview2-2

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•16 views

AZL-98697 CVE-2026-39824 affecting package golang 1.27.1-1

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•28 views

AZL-87215 CVE-2026-39824 affecting package cri-o 1.30.1-1

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•31 views

AZL-87299 CVE-2026-39824 affecting package podman 5.6.1-10

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/22 8:16 p.m.•8 views

AZL-111581 CVE-2026-39824 affecting package kubevirt-openvmm 1.9.0-1

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/22 8:16 p.m.•25 views

CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS5.9AI score0.00114EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/22 7:39 p.m.•281 views

CVE-2026-39824

The NewNTUnicodeString function fails to check for string length overflow , causing it to return a truncated string instead of an error when provided with a string exceeding the maximum size of a 16-bit number of bytes. This vulnerability affects several packages, including cri-tools , kube-state...

3.3CVSS6.6AI score0.00114EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/05/22 7:39 p.m.•24 views

CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

3.3CVSS6.8AI score0.00114EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/22 7:39 p.m.•30 views

CVE-2026-39824 Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

6.6AI score0.00114EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/22 7:39 p.m.•32 views

EUVD-2026-31498

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

5.9AI score0.00114EPSS
SaveExploits0References4
Rows per page
Query Builder