13000 matches found
Malicious code in syf-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a36b5dfd63736b61215e259a345ecf4691a6553267af52ff5485d1e5a8889c81 Any computer that has this package installed or running should be considered...
MAL-2025-4480 Malicious code in ideals-models (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9094b69aeede7f54491271e3aa85e2daed3a13e32c5bea91b73721225061b2d1 Any computer that has this package installed or running should be considered...
Malicious code in cspotcode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2130be6b5e619ba165a6aece5d32fbf21121d999dea65d83d80d4464db4b1ce Any computer that has this package installed or running should be considered...
CVE-2025-5163
The CVE-2025-5163 entry concerns yangshare warehouseManager (版本 1.0). The vulnerability is an improper access controls flaw introduced by a manipulation of the affected component, with remote initiation possible. Exploitation details are publicly disclosed, and the vendor is reportedly unresponsi...
MAL-2025-4423 Malicious code in tml-sso (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 847dbce1211be416799a06c22cc32901e282fd07fbb9d9b118b8763d7aa24b09 The OpenSSF Package Analysis project identified 'tml-sso' @ 10000.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in hpglobaldata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459cca0394666da81c2e6b2f659b91902693b72fd5e18fc6ca3e08347197e941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @dbtw/mfe-gateway (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...
CVE-2024-47871
Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves insecure communication between the FRP Fast Reverse Proxy client and server when Gradio's share=True option is used. HTTPS is not enforced on the connection, allowing attackers to intercept and rea...
CVE-2024-50050
Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead...
CVE-2024-42483
ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...
CVE-2024-22815
An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service DoS via crafted commands...
CVE-2024-28957
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...
CVE-2024-20850
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay...
CVE-2024-22313
IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 278749...
CVE-2024-22124
Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...
CVE-2024-20899
Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-41146
Use of Multiple Resources with Duplicate Identifier CWE-694 in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS communication cabling to perform a Denial-of-Service attack against HBUS connected devices, require a device reboot to resolve. Thi...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
CVE-2024-49417
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...