Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-15702

Malicious code in bioql PyPI...

7.5CVSS7.8AI score0.00302EPSS
Exploits0References1
OSV
OSV
added 2025/05/21 6:0 a.m.8 views

BIT-NODE-MIN-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS7.4AI score0.00302EPSS
Exploits0References2
OSV
OSV
added 2025/05/21 6:0 a.m.5 views

BIT-NODE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS6.6AI score0.00302EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/05/19 1:25 a.m.4 views

CVE-2025-23166

The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary...

7.5CVSS6.8AI score0.00302EPSS
Exploits0
CVE
CVE
added 2025/05/19 1:25 a.m.103 views

CVE-2025-23166

The CVE-2025-23166 issue affects Node.js and stems from SignTraits::DeriveBits() potentially calling ThrowException() with user-controlled inputs when run in a background thread, leading to a crash of the Node.js runtime. Public advisories in the Connected documents confirm affected packages (e.g...

7.5CVSS6.8AI score0.00302EPSS
Exploits0References1
Hacker One
Hacker One
added 2024/11/02 2:1 p.m.10 views

Node.js: Improper error handling in async cryptographic operations crashes process

The C++ method SignTraits::DeriveBits incorrectly called ThrowException based on user-supplied inputs when executing in a background thread, crashing the Node.js process...

7.5CVSS7.1AI score0.00302EPSS
Exploits0
GithubExploit
GithubExploit
added 2023/11/18 6:12 a.m.311 views

Exploit for Incorrect Comparison in Dynamic-Linq Linq

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...

9.8CVSS9.8AI score0.76907EPSS
Exploits4
Hacker One
Hacker One
added 2016/11/19 6:44 a.m.11 views

shopify-scripts: Segmentation fault when a Ruby method is invoked by a C method via Object#send

We can arrange for C to call Objectsend by aliasing it over initialize. This will cause Classnew a C function to call initialize which is actually Objectsend with arbitrary arguments. If we invoke a Ruby method through Objectsend, mruby segfaults: def foo end class X aliasmethod :initialize, :sen...

2.7AI score
Exploits0
Rows per page
Query Builder