13006 matches found
Malicious code in localeslice (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in newrelic.log (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...
CVE-2025-24844 communication_dsoftbus has a missing release of memory vulnerability
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...
Linux Distros Unpatched Vulnerability : CVE-2021-23134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the...
Linux Distros Unpatched Vulnerability : CVE-2023-53023
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called from localcleanup. This could happen when killing nfc daemon e....
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Titles: Microsoft Edge Renderer Process Mojo IPC 134.0.6998.177 - Sandbox Escape Author: nu11secur1ty Date: 08/07/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730...
MAL-2025-6812 Malicious code in eslint-plugin-react_editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...
Linux Distros Unpatched Vulnerability : CVE-2021-3760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availabilit...
Linux Distros Unpatched Vulnerability : CVE-2019-12818
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check...
Linux Distros Unpatched Vulnerability : CVE-2022-50016
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a...
Linux Distros Unpatched Vulnerability : CVE-2023-53119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy...
Linux Distros Unpatched Vulnerability : CVE-2021-47518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: fix potential NULL pointer deref in nfcgenldumpsesdone The done netlink callback nfcgenldumpsesdone should check if received argument is non-NULL, because...
Linux Distros Unpatched Vulnerability : CVE-2023-52919
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix possible NULL pointer dereference in sendacknowledge Handle memory allocation failure from nciskballoc calling allocskb to avoid possible NULL...
Malicious code in seznam-diskuze (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6854 Malicious code in seznam-diskuze (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6852 Malicious code in sendbird-groupchannel (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in mapbox-gl-js-toys (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in posa-loginpage-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 84c3125fd931daa33ae630ab312e984e99008ff68f7f1e118b3f54142026f4a5 The OpenSSF Package Analysis project identified 'posa-loginpage-plugin' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
