5181 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-5944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users...
Malicious code in react-event-tracker1 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in react-event-tracker-dpdpoc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-9134
A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file AndroidManifest.xml of the component com.aftership.AfterShip. The manipulation leads to improper export of android application components. T...
CVE-2025-9134
CVE-2025-9134 affects AfterShip Package Tracker App (Android) up to version 5.24.1, where an unknown function in the AndroidManifest.xml of the com.aftership.AfterShip component allows improper export of Android app components. The issue enables local attack execution; public exploit information ...
CVE-2025-9134: Improper Export of Android Application Components
A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file AndroidManifest.xml of the component com.aftership.AfterShip. The manipulation leads to improper export of android application components. T...
AfterShip Package Tracker App security vulnerability
AfterShip Package Tracker App is a courier tracking app by AfterShip Singapore. A security vulnerability exists in AfterShip Package Tracker App version 5.24.1 and earlier, which stems from an improperly exported AndroidManifest.xml component and could lead to a local attack...
Ubuntu: Security Advisory (USN-7692-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-33718
Name of the Vulnerable Software and Affected Versions: AfterShip Package Tracker App versions through 5.24.1 Description: A security vulnerability has been detected in AfterShip Package Tracker App on Android. The affected element is an unknown function within the AndroidManifest.xml file of the...
Linux Distros Unpatched Vulnerability : CVE-2019-14523
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmtoktloadsong in the Amiga Oktalyzer parser in...
Linux Distros Unpatched Vulnerability : CVE-2019-13640
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In qBittorrent before 4.1.7, the function Application::runExternalProgram located in app/application.cpp allows command injection via shell metacharacters in th...
Linux Distros Unpatched Vulnerability : CVE-2025-31500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Best Practical RT Request Tracker 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name. CVE-2025-31500 Note that Nessus relies on the presence...
Linux Distros Unpatched Vulnerability : CVE-2022-25802
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Best Practical Request Tracker RT before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment. CVE-2022-25802 Note that Nessus...
Malicious code in quota_tracker_ruby (npm)
The package quotatrackerruby was found to contain malicious code...
Malicious code in @marcos_feitoza/timer-tracker-swim (npm)
The package @marcosfeitoza/timer-tracker-swim was found to contain malicious code...
Malicious code in sm-tracker (npm)
The package sm-tracker was found to contain malicious code...
Malicious code in usage-tracker-public (npm)
The package usage-tracker-public was found to contain malicious code...