1321 matches found
EUVD-2023-42334
Malicious code in bioql PyPI...
EUVD-2024-44039
Malicious code in bioql PyPI...
EUVD-2021-7649
Malicious code in bioql PyPI...
EUVD-2024-45982
Malicious code in bioql PyPI...
EUVD-2023-42335
Malicious code in bioql PyPI...
EUVD-2024-43184
Malicious code in bioql PyPI...
CVE-2025-10472 harry0703 MoneyPrinterTurbo URL video.py stream_video path traversal
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function downloadvideo/streamvideo of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument filepath leads to path traversal. The attack can be...
CVE-2025-58435
Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...
CVE-2025-58435 Open OnDemand didn't rotate password for VNC batch_connect
Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...
CVE-2025-58435 Open OnDemand didn't rotate password for VNC batch_connect
Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...
Malicious code in @lbnqduy2180500/turbo-train (npm)
The package @lbnqduy2180500/turbo-train was found to contain malicious code...
MAL-2025-42688 Malicious code in @lbnqduy2180500/turbo-train (npm)
The package @lbnqduy2180500/turbo-train was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2020-35538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo. CVE-2020-35538 Note that Nessus relies on the...
ROOT-OS-DEBIAN-11-CVE-2021-46822 CVE-2021-46822 in rootio-libjpeg-turbo - Patched by Root
Root has patched CVE-2021-46822 in the rootio-libjpeg-turbo package for Root:Debian:11. Multiple fixed versions available...
Citizen Lab Reports Hidden VPN Networks Sharing Ownership and Security Flaws
Citizen Lab's new report, Hidden Links, uncovers a network of VPN providers like Turbo VPN and VPN Monster…...
Malicious code in @lbnqduy/turbo-chainsaw (npm)
The package @lbnqduy/turbo-chainsaw was found to contain malicious code...
Malicious code in test-mlw2-trior-turbo (npm)
The package test-mlw2-trior-turbo was found to contain malicious code...
Malicious code in test-mlw2-turbo-linch (npm)
The package test-mlw2-turbo-linch was found to contain malicious code...