2102 matches found
EUVD-2022-2539
Malicious code in bioql PyPI...
aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59682 via django (>=5.2.0 <=5.2.6)
django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59682 Source advisory: OSV:GHSA-Q95W-C7QG-HRFF...
aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59681 via django (>=5.2.0 <=5.2.6)
django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59681 Source advisory: OSV:GHSA-HPR9-3M2G-3J9P...
Malicious code in org.mixedrealitytoolkit.standardassets (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-43791
Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via a "Rich Text" field when processing user-supplied input in web content structures, document types, or custom assets. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...
CVE-2025-43791
Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...
Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification
Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...
CVE-2025-55238
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability...
Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)
The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...
Malicious code in bunyan-spica-optimize-css-assets-webpack-plugin-await (npm)
The package bunyan-spica-optimize-css-assets-webpack-plugin-await was found to contain malicious code...
Malicious code in membrane-optimize-css-assets-webpack-plugin-plutology-gatsby (npm)
The package membrane-optimize-css-assets-webpack-plugin-plutology-gatsby was found to contain malicious code...
Malicious code in auth-polaris-rate-limiter-optimize-css-assets-webpack-plugin (npm)
The package auth-polaris-rate-limiter-optimize-css-assets-webpack-plugin was found to contain malicious code...
Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)
The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...
Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)
The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-astrophysics-mechatronics-brane (npm)
The package optimize-css-assets-webpack-plugin-astrophysics-mechatronics-brane was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-fornax-global-markdownlint (npm)
The package optimize-css-assets-webpack-plugin-fornax-global-markdownlint was found to contain malicious code...