13840 matches found
MAL-2025-26812 Malicious code in mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay (npm)
The package mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay was found to contain malicious code...
MAL-2025-14247 Malicious code in alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu (npm)
The package alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu was found to contain malicious code...
MAL-2025-41004 Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)
The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...
MAL-2025-20541 Malicious code in file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe (npm)
The package file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe was found to contain malicious code...
MAL-2025-41012 Malicious code in zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn (npm)
The package zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn was found to contain malicious code...
MAL-2025-41015 Malicious code in zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr (npm)
The package zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr was found to contain malicious code...
MAL-2025-18700 Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)
The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...
MAL-2025-14253 Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)
The package alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun was found to contain malicious code...
MAL-2025-14245 Malicious code in alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh (npm)
The package alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh was found to contain malicious code...
MAL-2025-15155 Malicious code in availab-le-alb-um-zip-17375-who-else-esihf-alrnbv (npm)
The package availab-le-alb-um-zip-17375-who-else-esihf-alrnbv was found to contain malicious code...
A Comprehensive Analysis of HijackLoader and its Infection Chain
A Comprehensive Analysis of HijackLoader and Its Infection Chain By Ryan Weil · August 14, 2025 Initial contact Dodi Repacks is a website that distributes pirated games. The site is listed as safe/trusted on various piracy forums, and users say that "as long as you have an adblocker installed suc...
CVE-2011-10016
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...
CVE-2011-10016
CVE-2011-10016 affects Real Networks Netzip Classic 7.5.1.86. A stack-based buffer overflow occurs while parsing a specially crafted ZIP archive, triggered by a file name exceeding the expected buffer size. Exploitation allows arbitrary code execution under the victim user's context when the ZIP ...
CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...
CVE-2011-10016 Real Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow
Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...
CVE-2025-45317
A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive...
Directory Traversal
Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via the model loading process. An attacker can execute arbitrary code and tamper with data by supplying a .nemo file containing maliciously crafted metadata...
New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks
Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot. "PS1Bot features a modular design, with several modules delivered used to perform a variety of malicious activities on infected systems,...
Directory Traversal
Overview studio-42/elfinder is an open-source file manager for web, written in JavaScript using jQuery UI. Affected versions of this package are vulnerable to Directory Traversal via the onShutdown function in the elFinder.class.php file. An attacker can delete arbitrary files by sending crafted...