1717 matches found
EUVD-2023-53943
Malicious code in bioql PyPI...
EUVD-2023-43862
Malicious code in bioql PyPI...
EUVD-2023-31100
Malicious code in bioql PyPI...
EUVD-2023-56768
Malicious code in bioql PyPI...
EUVD-2025-24040
Malicious code in bioql PyPI...
Malicious code in @igh/server-updater-ssh-l1 (npm)
The package contains malicious code...
MAL-2025-47896 Malicious code in @igh/server-updater-ssh-l1 (npm)
The package contains malicious code...
CVE-2025-11139
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...
CVE-2025-11139
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...
CVE-2025-11139
Summary (CVE-2025-11139): Bjskzy Zhiyou ERP (versions up to 11.0) is affected by a path traversal vulnerability in the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. The vulnerability stems from manipulating the filepath argument, enabling path traversal an...
CVE-2025-11139 Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...
CVE-2025-11139 Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: harbor-registry, k8sgpt, mockgen, swagger, kyverno-notation-aws, regclient, terraform, aws-privateca-issuer, polaris, glow, nri-mysql, dive, wait-for-port, kuberlr, kubernetes-dashboard-web, cluster-api-helm-controller, nri-f5, gptscript, argo-events,...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: nri-mysql, aws-application-networking-k8s, eck-operator, kubernetes-dashboard-web, rancher, nuclei, falcoctl, kubernetes-dashboard, vault, blob-csi, kapp, glow, tflint, gcp-compute-persistent-disk-csi-driver, helm-set-status, kubernetes-dashboard-api,...
CVE-2025-9059
The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...
CVE-2025-9059
The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...
AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto
Cybersecurity researchers have disclosed details of a new campaign that leverages ConnectWise ScreenConnect, a legitimate Remote Monitoring and Management RMM software, to deliver a fleshless loader that drops a remote access trojan RAT called AsyncRAT to steal sensitive data from compromised...
CVE-2025-9059
CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...
CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite
The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...