47 matches found
libfreefare
Introduction The libfreefare project provides a convenient API for MIFARE card manipulations. It is part of the nfc-tools , you can find more info on them on the nfc-tools wiki. If you are new to libfreefare or the nfc-tools , you should collect useful information on the project website and the...
IMAP Client API Ruby Command Injection
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
IMAP Client API Ruby DoS
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to incorrect filtering of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
IMAP Client API Ruby Command Injection
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
OPENSUSE-SU-2026:11731-1 containerized-data-importer1.65-api-1.65.0-3.1 on GA media
These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-3.1 package on the GA media of openSUSE Tumbleweed...
GO-2026-5929 New API is vulnerable to CSRF through user email binding in github.com/QuantumNous/new-api
New API is vulnerable to CSRF through user email binding in github.com/QuantumNous/new-api...
Malicious code in paysafe-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce9ede35fc7679965ba83f58e829a328482bf1fbdb2e450d23e20bed24d708f The package presents itself as a Paysafe REST SDK PaysafeClient with payments and customers methods but the SDK methods are stubs that return...
CVE-2026-46391
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0.0 of @haxtheweb/open-apis, multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be sent. An attacker can append the...
GO-2026-4531 New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api...
EUVD-2025-38443
Malicious code in telstraprogrammablenetworkapilib npm...
EUVD-2010-1350
Malware in sbrugna...
Malicious code in thescene-api-library (npm)
The package thescene-api-library was found to contain malicious code...
MAL-2025-36799 Malicious code in thescene-api-library (npm)
The package thescene-api-library was found to contain malicious code...
gh 安全漏洞
gh is a GitHub API library open-sourced by R infrastructure. A security vulnerability exists in gh versions prior to 1.5.0, which stems from the inclusion of the Authorization header in an HTTP response, which could lead to information disclosure...
CVE-2025-48391
In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API...
Malicious code in dex-api-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cebe6e3901a157f586d6d5418f0a6995bf4d085c63acd7730784b55b744e65a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-50575
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...
CVE-2024-43574
Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability...