392 matches found
PT-2025-53762
Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d abi tags function within the cp-demangle.c file. This can lead to a denial of service when processing specially crafted PE files. Recommendations Update to a newer version that contain...
CVE-2025-66866
An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...
CVE-2025-66866
An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...
Malicious code in sugoodaini-ngasa-abi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6c5fe10164b619a819ad125737fbc9768d7840f6f8c4d822869c7190bb2457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-136293
Malicious code in sugoodaini-ngasa-abi npm...
EUVD-2025-144331
Malicious code in namei-mala-abi npm...
Malicious code in abi-alaufi-avua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e068da018b0c9f2920cb10ea5d7b300e8af0222e6daa0dc45bfbb50f3e8a7b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in abi-alaufi-ayavauba (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea28c341c2f5d406c4238b693df8660a0ecad0289b031852ab13263cd311282e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in abi-alafi-avu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f626e826a25f77f529eaecd5bbd90f2f0b55e61b5e18b569cb792cb224ecef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-151214 Malicious code in abi-alaufi-ayvauba (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca1688864063ef89290a5ada8a3a25772b3e23a17d0c8aa79d37792073b288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Package
Overview near-abi-client-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-35943
Malicious code in near-abi-client-js npm...
Malicious code in near-abi-client-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48605 Malicious code in near-abi-client-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-PGP9-98JM-WWQ2 alloy-dyn-abi has DoS vulnerability on `alloy_dyn_abi::TypedData` hashing
Impact An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can...
EUVD-2025-34683
alloy-dyn-abi has DoS vulnerability on alloydynabi::TypedData hashing...
RUSTSEC-2025-0073 DoS vulnerability on `alloy_dyn_abi::TypedData` hashing
An uncaught panic triggered by malformed input to alloydynabi::TypedData could lead to a denial-of-service DoS via eip712signinghash. Software with high availability requirements such as network services may be particularly impacted. If in use, external auto-restarting mechanisms can partially...
EUVD-2017-11624
Malware in sbrugna...