EUVD-2024-48631

Malicious code in bioql PyPI...

EUVD-2025-18689

Malicious code in bioql PyPI...

EUVD-2022-52450

Malicious code in bioql PyPI...

EUVD-2023-44323

Malicious code in bioql PyPI...

EUVD-2023-2014

Malicious code in bioql PyPI...

EUVD-2025-28257

Malicious code in bioql PyPI...

EUVD-2022-29730

Malicious code in bioql PyPI...

EUVD-2023-27050

Malicious code in bioql PyPI...

Amazon Linux 2023 : iperf3, iperf3-devel (ALAS2023-2025-1197)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1197 advisory. In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. CVE-2025-54349 In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure an...

CVE-2025-11155: Weak Encoding for Password

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials...

Medium: iperf3

Issue Overview: In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. CVE-2025-54349 In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. CVE-2025-54350 Affected...

SATO S86-ex 203dpi 安全漏洞

SATO S86-ex 203dpi is a print engine from SATO Japan. A security vulnerability exists in the SATO S86-ex 203dpi that originates from the device web server access credentials being sent as base64 via HTTP headers, which may be intercepted for acquisition...

CLSA-2025-1758896091 gdk-pixbuf2: Fix of CVE-2025-7345

CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...

Malicious code in bloxypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca1bb0aab09d6ef59ee1ff8485c8c2a6b565c1311246ed61d63c9757bd44ecdc Attempting to use the module starts obfuscated code containing an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-47572 Malicious code in bloxypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca1bb0aab09d6ef59ee1ff8485c8c2a6b565c1311246ed61d63c9757bd44ecdc Attempting to use the module starts obfuscated code containing an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...

CVE-2025-59344 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction

AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...

CVE-2025-59344

AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...

Malicious code in html-to-base64-image (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344ae7d30a0afbb65b792da96ef3c9756e42e9fc82a6204b5f9e1ab0ce925a4c Any computer that has this package installed or running should be considered fully compromised. All...