742 matches found
PT-2025-48075
Name of the Vulnerable Software and Affected Versions node-forge versions 1.3.1 and earlier Description An interpretation-conflict issue exists in node-forge. Unauthenticated attackers can create specific ASN.1 structures that disrupt schema validations. This can lead to a difference in how data ...
Forge JavaScript library impacted by a vulnerability in signature verification.
Overview The Forge JavaScript library provides TLS-related cryptographic utilities. A vulnerability that allows signature verification to be bypassed through crafted manipulation of ASN.1 structures, particularly in fields such as Message Authentication Code MAC data, was identified. Users of the...
The vulnerability of the Go programming language’s encoding/ASN1 component, which allows a hacker to trigger a service failure.
The vulnerability of the Go programming language’s encoding/ASN1 component is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the SAP CommonCryptoLib library, related to the execution of operations outside the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the SAP CommonCryptoLib library is related to the execution of operations outside the buffer in memory when processing ASN.1 data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
Malicious code in abstract-hash-key-report-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176391
Malicious code in sigma-awk-abstract-error-kappa npm...
EUVD-2025-178859
Malicious code in fork-secure-code-daemon-abstract npm...
EUVD-2025-180175
Malicious code in awk-node-abstract-interpret-alert npm...
EUVD-2025-180520
Malicious code in abstract-mu-kappa-authenticate-decode npm...
EUVD-2025-179763
Malicious code in char-alert-abstract-decrypt-test npm...
Malicious code in analyze-abstract-hash-code-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178451
Malicious code in import-abstract-nu-private-decrypt npm...
MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180521
Malicious code in abstract-interface-stub-delta-cloud npm...
EUVD-2025-177053
Malicious code in private-abstract-optimize-view-rain npm...
EUVD-2025-175486
Malicious code in xi-abstract-user-alert-parse npm...
EUVD-2025-178788
Malicious code in gamma-stack-fire-async-abstract npm...