10287 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-43499
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43499 Note that Nessus relies on the presence of the package as reported by the vendor...
MAL-2025-6893 Malicious code in gen-studio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75651f44d228425603e123afc19ebe54f8701a76f7c4325cdb00545156df506a The OpenSSF Package Analysis project identified 'gen-studio' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in gen-studio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75651f44d228425603e123afc19ebe54f8701a76f7c4325cdb00545156df506a The OpenSSF Package Analysis project identified 'gen-studio' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...
CAN Networks Security in Smart Grids Communication Technologies
The rapid evolution of smart grids requires effective communication protocols to transfer data reliably and securely. Controller Area Network CAN is one of the most recognized protocols that offer reliable data transmission in smart grids due to its robustness, real-time capabilities, and...
CVE-2011-10015
Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerability occurs when the application copies user-controlled strings into a fixed-size stack buffer 256 bytes without proper bounds checking. Exploitation allows...
CVE-2025-54074
Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...
CVE-2025-54382
Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution RCE vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirecti...
CVE-2025-52385
An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...
Malicious code in generator-studio-api (npm)
The package generator-studio-api was found to contain malicious code...
Malicious code in mapbox-studio (npm)
The package mapbox-studio was found to contain malicious code...
MAL-2025-21306 Malicious code in generator-studio-api (npm)
The package generator-studio-api was found to contain malicious code...
MAL-2025-25912 Malicious code in mapbox-studio (npm)
The package mapbox-studio was found to contain malicious code...
MAL-2025-15187 Malicious code in avalon-plugin-studio (npm)
The package avalon-plugin-studio was found to contain malicious code...
Malicious code in a-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwp (npm)
The package a-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwp was found to contain malicious code...
MAL-2025-38651 Malicious code in vscode-extend (npm)
The package vscode-extend was found to contain malicious code...
MAL-2025-38653 Malicious code in vscode-mssql (npm)
The package vscode-mssql was found to contain malicious code...
Malicious code in avalon-plugin-studio (npm)
The package avalon-plugin-studio was found to contain malicious code...
MAL-2025-15225 Malicious code in aws-core-vscode (npm)
The package aws-core-vscode was found to contain malicious code...
MAL-2025-38656 Malicious code in vscode.markdown-it-renderer (npm)
The package vscode.markdown-it-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2822922f8dca5f68d170c921999dd1e45b4dd8b470e088d9aadbe5806cc2069b This package installs a dependency hosted on a custom domain...