Lucene search
+L

880 matches found

OSV
OSV
•added 2025/12/23 7:59 a.m.•11 views

MAL-2025-192711 Malicious code in assert-json-not (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad56c36eacf8881039723de4379e14983280b611dba15585274909b1a3c1b326 The package assert-json-not was found to contain malicious code...

6.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/23 7:59 a.m.•14 views

Malicious code in assert-json-not (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad56c36eacf8881039723de4379e14983280b611dba15585274909b1a3c1b326 The package assert-json-not was found to contain malicious code...

7AI score
SaveExploits0References3
Redos
Redos
•added 2025/12/19 12:00 a.m.•10 views

ROS-20251219-7303

A vulnerability in the MongoDB database management system server is related to the use of assert or a similar operator. Exploitation of the vulnerability could allow a remote attacker to affect the availability of protected information...

7.5CVSS6.8AI score0.00326EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•2 views

CVE-2025-68261: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data destruction and block mapping. The function ext4destroyinlinedatanolock changes the inode data layout by clearing EXT4INODEINLINEDATA and...

7.5CVSS6.1AI score0.00537EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/05 12:00 a.m.•9 views

The vulnerabilities of the functions ovl_encode_real_fh() (fs/overlayfs/copy_up.c) and show_mark_fhandle() (fs/notify/fdinfo.c) in the Linux operating system’s kernel allow a malicious actor to trigger a service failure.

The vulnerability of the functions ovlencoderealfh fs/overlayfs/copyup.c and showmarkfhandle fs/notify/fdinfo.c in the Linux kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.8AI score0.00262EPSS
SaveExploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•13 views

The vulnerability of the net/core/gen_estimator.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the net/core/genestimator.c component in the Linux operating system is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.2AI score0.00143EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•12 views

The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel driver relates to the insufficient use of the assert function. Exploiting this vulnerability allows attackers to cause service failures...

5.5CVSS6.2AI score0.00143EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•9 views

The vulnerability of the Linux operating system’s kernel, related to the insufficient use of the assert() function, allows a hacker to trigger a system failure.

The vulnerability of the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.2AI score0.00174EPSS
SaveExploits0References20Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•13 views

Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows attackers to cause service failures...

5.5CVSS6.3AI score0.00114EPSS
SaveExploits0References15Affected Software6
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•9 views

Malicious Package

Overview assert-json-not is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•13 views

The vulnerability of the MongoDB database management system server allows attackers to compromise the accessibility of protected information.

The vulnerability of the MongoDB database management system server relates to the use of the assert function or similar operators. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information...

6.8CVSS5.8AI score0.00326EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2025/11/25 4:52 a.m.•7 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.7AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/25 4:52 a.m.•24 views

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS0.00285EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/25 4:52 a.m.•18 views

EUVD-2025-199533

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS6.3AI score0.00285EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2025/11/25 12:00 a.m.•14 views

MongoDB -- Improper Validation of Specified Quantity in Input

https://jira.mongodb.org/browse/SERVER-108565 reports: Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination...

7.1CVSS6.7AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•3 views

CVE-2025-13507: Improper Validation of Specified Quantity in Input

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

7.1CVSS5.7AI score0.00285EPSS
SaveExploits0References1
Rockylinux
Rockylinux
•added 2025/11/21 6:19 p.m.•18 views

kea security update

An update is available for kea. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DHCP implementation from Internet Systems Consortium, Inc. that features fully...

7.5CVSS7.1AI score0.00424EPSS
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•8 views

EUVD-2025-178092

Malicious code in link-cron-simulate-assert-log npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•8 views

EUVD-2025-179742

Malicious code in chi-short-export-assert-execute npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/13 3:23 a.m.•10 views

EUVD-2025-179845

Malicious code in catch-byte-decompress-cluster-assert npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder