Lucene search
+L

1553 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/28 6:55 p.m.•7 views

Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
•added 2025/04/28 6:55 p.m.•14 views

MAL-2025-3495 Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
CVE
CVE
•added 2025/04/15 1:44 a.m.•93 views

CVE-2025-3470

CVE-2025-3470 describes an authenticated SQL Injection in the WordPress plugin TS Poll – Survey, Versus Poll, Image Poll, Video Poll, affecting versions up to and including 2.4.6. The root cause is insufficient escaping of the user-supplied s parameter and inadequate preparation in the existing S...

4.9CVSS5.3AI score0.00406EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/15 1:44 a.m.•13 views

CVE-2025-3470 TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS7.5AI score0.00406EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•3 views

CVE-2025-3470: Improper Neutralization of Special Elements used in an SQL Command

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.7AI score0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•22 views

PT-2025-16282 · WordPress · Ts Poll – Survey

Name of the Vulnerable Software and Affected Versions: TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress versions up to, and including, 2.4.6 Description: The issue concerns SQL Injection via the s parameter due to insufficient escaping on the user-supplied parameter and...

4.9CVSS6.3AI score0.00406EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/04/09 11:13 a.m.•35 views

CVE-2025-21429

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

7.5CVSS7.1AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/07 9:15 p.m.•41 views

CVE-2025-32029

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 231 -- 232 - 1. The arithmetic in the numBitLen didn't take into account that values in this range could result in a...

6.9CVSS0.00234EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/07 8:13 p.m.•6 views

CVE-2025-32029 ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 231 -- 232 - 1. The arithmetic in the numBitLen didn't take into account that values in this range could result in a...

6.9CVSS7AI score0.00234EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/07 8:13 p.m.•24 views

CVE-2025-32029 ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 231 -- 232 - 1. The arithmetic in the numBitLen didn't take into account that values in this range could result in a...

6.9CVSS6.5AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/07 10:15 a.m.•37 views

CVE-2025-21430 Buffer Over-read in WLAN Host

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session...

7.5CVSS0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/07 10:15 a.m.•20 views

CVE-2025-21429 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

7.5CVSS7.9AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/07 10:15 a.m.•33 views

CVE-2025-21429 Buffer Over-read in WLAN Host

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

7.5CVSS0.00258EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•2 views

CVE-2025-21429: Buffer Over-read

Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request...

7.5CVSS6AI score0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•19 views

PT-2025-15291 · Unknown · Ts-Asn1-Der

Name of the Vulnerable Software and Affected Versions: ts-asn1-der versions prior to 1.0.4 Description: The issue is related to incorrect number DER encoding, which can lead to denial of service for absolute values in the range 231 to 232 - 1. This is due to the arithmetic in the numBitLen not...

6.9CVSS6.2AI score0.00234EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•11 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a connection STA to an AP and initializes an ADD TS request that could result in a transient denial of service...

7.5CVSS6.4AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•3 views

CVE-2025-32029: Loop with Unreachable Exit Condition

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 231 -- 232 - 1. The arithmetic in the numBitLen didn't take into account that values in this range could result in a...

6.9CVSS5.9AI score0.00234EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/04/02 3:04 p.m.•5 views

@adobe/helix-importer (>=3.4.65, <=3.4.79), @adobe/helix-md2docx (>=2.2.0, <=2.2.7) +93 more potentially affected by CVE-2025-71319 via image-size (>=2.0.0, <=2.0.1)

image-size NPM version =2.0.0, =3.4.65, =2.2.0, =2.6.5, =1.3.47, =1.4.2, =1.0.1-alpha.1, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427, =0.5.12-alpha-20241008130427...

8.7CVSS5.3AI score0.00729EPSS
SaveExploits1
Spring Security Advisories
Spring Security Advisories
•added 2025/03/20 12:00 a.m.•29 views

A Bootiful Podcast: Java Champion and legend Henri Tremblay

Hi, Spring fans! In this installment I talk to Henri Tremblay, head of TS Imagine Canada, Java Champion, Montreal JUG leader, EasyMock lead dev and all around legend!...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/12 3:12 a.m.•4 views

Malicious code in company-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100c9d7a50130bea1bde224e847ea63eeaadc65dfcd332d6cf0132d686af772a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder