Lucene search
+L

2976 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2015-6755

Malware in sbrugna...

7.5CVSS8.3AI score0.02412EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-1440

Malware in sbrugna...

9.1CVSS8AI score0.01155EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-2272

Malware in sbrugna...

7.8CVSS6AI score0.04342EPSS
SaveExploits0References33
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/07 12:17 a.m.•9 views

Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
Snyk
Snyk
•added 2025/10/07 12:17 a.m.•4 views

Malicious Package

Overview vite-plugin-chunk-chop is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
•added 2025/10/07 12:17 a.m.•7 views

MAL-2025-47933 Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/10/07 12:17 a.m.•2 views

Malware in vite-plugin-chunk-chop

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•7 views

Unity Linux 20.1070e Security Update: varnish (UTSA-2025-684696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-684696 advisory. Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client- side desync via HTTP/1 requests, because the product...

5.4CVSS6AI score0.00364EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•14 views

Unity Linux 20.1050e / 20.1070e Security Update: taglib (UTSA-2025-984685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984685 advisory. TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...

7.1CVSS4.7AI score0.00312EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/10/07 12:00 a.m.•7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-386036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-386036 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctpsfootb A size validation fix similar to that in Commit...

8.2CVSS6.4AI score0.00623EPSS
SaveExploits0References3
Veracode
Veracode
•added 2025/10/06 4:44 p.m.•17 views

HTTP Request Smuggling

io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to incorrectly accepting standalone newline characters LF as a chunk-size line terminator instead of requiring CRLF per HTTP/1.1 standards, which allows an attacker to craft malicious requests that are...

7.5CVSS6.5AI score0.00677EPSS
SaveExploits1References10Affected Software1
OSV
OSV
•added 2025/10/06 8:15 a.m.•18 views

UBUNTU-CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

8.7CVSS6AI score0.00181EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/04 8:15 a.m.•27 views

AZL-68171 CVE-2025-39940 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...

5.5CVSS6.1AI score0.00143EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/04 8:15 a.m.•12 views

UBUNTU-CVE-2025-39940

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...

5.5CVSS6.2AI score0.00143EPSS
SaveExploits0References16
CVE
CVE
•added 2025/10/04 7:31 a.m.•49 views

CVE-2025-39940

CVE-2025-39940 concerns the Linux kernel’s dm-stripe component. A potential integer overflow can occur in stripe_io_hints when the chunk size is too large. The fix tests for an overflow and, if detected, avoids setting limits->io_min and limits->io_opt. This mitigates a local-privilege vect...

5.5CVSS6.4AI score0.00143EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/10/04 7:31 a.m.•11 views

CVE-2025-39940 dm-stripe: fix a possible integer overflow

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...

6.5AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/04 12:00 a.m.•5 views

CVE-2025-39940: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...

5.5CVSS5.9AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2024-47482

Malicious code in bioql PyPI...

6.5CVSS7AI score0.0038EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•41 views

EUVD-2022-55555

Malicious code in bioql PyPI...

6.5AI score0.00166EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-2225

Malicious code in bioql PyPI...

5.8CVSS5.5AI score0.00754EPSS
SaveExploits0References7
Rows per page
Query Builder