235 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-11412 affecting package binutils for versions less than 2.41-10
CVE-2025-11412 affecting package binutils for versions less than 2.41-10. A patched version of the package is available...
EUVD-2025-115002
Malicious code in cordelia-orbit-mutation-prompts npm...
Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-2369)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2025-42878
Malicious code in ogi-rujaksoto95-miaww npm...
@afif_hh/composable (1.0.2), @afif_hh/ui_components (>=1.0.5, <=1.0.30) +67 more potentially affected by CVE-2025-57325 via rollbar (>=2.1.0, <=2.26.4)
rollbar NPM version =2.1.0, =1.0.5, =1.0.0, =0.0.2, =0.0.5, =0.0.2-beta.1, =1.0.0-alpha.1, =1.0.5, =1.1.12, =1.3.10, =1.1.11, =1.0.3, =2.1.0-alpha.3, =2.1.0-alpha.3, =2.1.3 and more Source cves: CVE-2025-57325 Source advisory: SNYK:JS-ROLLBAR-13110036...
0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)
@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: OSV:GHSA-VH3F-QPPR-J97F...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free through improper handling of web content. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or...
archivefs (>=1.0.0, <=1.0.1), arcon_compiler (>=0.1.0, <=0.1.1) +83 more potentially affected by unknown CVE via daemonize (>=0.2.3, <=0.5.0)
daemonize CARGO version =0.2.3, =1.0.0, =0.1.0, =0.3.1, =0.2.0, =0.5.0, =3.0.0, =0.1.0, =0.1.3, =0.0.1, =0.4.0, =0.1.0, =0.1.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0069...
Linux Distros Unpatched Vulnerability : CVE-2025-3409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argumen...
Linux Distros Unpatched Vulnerability : CVE-2024-22654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. CVE-2024-22654 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2017-6596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the message boards feature available through the web interface. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious scripts into messages. Details Cross-sit...
Malicious code in @npmshivamkalsi/blanditiis-architecto-iusto-asperiores (npm)
The package @npmshivamkalsi/blanditiis-architecto-iusto-asperiores was found to contain malicious code...
MAL-2025-8501 Malicious code in @malware-test-birds-deist-klutz-loper/test-mlw3-birds-deist-klutz-loper (npm)
The package @malware-test-birds-deist-klutz-loper/test-mlw3-birds-deist-klutz-loper was found to contain malicious code...
MAL-2025-31684 Malicious code in raspberry-strawberry-zulu-choiw (npm)
The package raspberry-strawberry-zulu-choiw was found to contain malicious code...
MAL-2025-8249 Malicious code in @landmineaknpm2/error-optio-quidem (npm)
The package @landmineaknpm2/error-optio-quidem was found to contain malicious code...