1736 matches found
Wazuh 安全漏洞
Wazuh is a Wazuh open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A security vulnerability exists in Wazuh that stems from the presence of heap-based out-of-bounds writes in...
PT-2025-44314
Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.10.2 Description Wazuh, a free and open source platform for threat prevention, detection, and response, contains a heap-based out-of-bounds write issue in the decode win permissions function. This flaw allows a...
CVE-2025-11202: Improper Neutralization of Special Elements used in an OS Command
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists...
Malicious Package
Overview node-global-win is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48581 Malicious code in node-global-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e452b98f142332c84afc6351d76f24422e6a084c3718af17d6eb29b1c20643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35750
Malicious code in node-global-win npm...
Malicious code in node-global-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e452b98f142332c84afc6351d76f24422e6a084c3718af17d6eb29b1c20643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
HTTP Request Smuggling
Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the interpretation of chunke...
EUVD-2025-34321
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2025-58714
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2020-5787
Malware in sbrugna...
EUVD-2020-28118
Malware in sbrugna...
EUVD-2018-2442
Malware in sbrugna...
EUVD-2020-28145
Malware in sbrugna...
EUVD-2014-5734
Malware in sbrugna...
EUVD-2020-5786
Malware in sbrugna...
EUVD-2020-28122
Malware in sbrugna...
EUVD-2022-28842
Malicious code in bioql PyPI...