12853 matches found
CVE-2025-61815 InDesign Desktop | Use After Free (CWE-416)
InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-61824 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-61832
CVE-2025-61832 corresponds to a heap-based buffer overflow in Adobe InDesign Desktop (versions 20.5, 19.5.5 and earlier) that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). The connected documents confirm the vu...
CVE-2025-35971
Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...
EUVD-2025-88999
Malicious code in rudi-gepuk97-miaww npm...
CVE-2025-10161
creationtimestamp| type| source ---|---|--- 2025-11-11 13:37:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eaxwmldp32 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8...
CVE-2025-62483
creationtimestamp| type| source ---|---|--- 2025-11-11 11:28:56+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m5dzu2xzip2d 2025-11-13 15:37:17+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5jilrm7fxy2...
EUVD-2025-74757
Malicious code in democraticbeetlechocolate-22 npm...
EUVD-2025-74378
Malicious code in parliamentaryhummingbirdscarlet-20 npm...
EUVD-2025-74198
Malicious code in statutorypigivory-20 npm...
EUVD-2025-74384
Malicious code in paleimpalaemerald-28 npm...
EUVD-2025-74187
Malicious code in subsequentstingrayharlequin-20 npm...
EUVD-2025-74172
Malicious code in systematicgullcyan-20 npm...
EUVD-2025-70879
Malicious code in dewi-donat25-ruro npm...
CVE-2025-12840
creationtimestamp| type| source ---|---|--- 2025-11-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-991/ 2026-01-26 11:26:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdd56ezxo22q...
EUVD-2025-66071
Malicious code in tomi-ronde54-riris npm...
EUVD-2025-66978
Malicious code in rudi-mangut97-miaww npm...
MAL-2025-78941 Malicious code in indah-ketoprak20-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d596d5b3b3a267a0db7c0d806b398b5cffa3aa36d4e11e41f4299216475152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...