8935 matches found
SAMSUNG SMR 安全漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. SAMSUNG SMR suffers from a security vulnerability that stems from improper export of Android application components in Settings, which could lead to a physical...
CVE-2025-29746
CVE-2025-29746 is a Cross Site Scripting (XSS) vulnerability in Koillection v1.6.10 that enables a remote attacker to escalate privileges through the collection, Wishlist, and album components. The vulnerability is documented across multiple sources (Red Hat, OSV, GitHub advisories, Snyk) with re...
Malicious code in @ebay-business-components/marko-rum (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain access to read, modify, add, or delete data, or to cause service interruptions.
Vulnerability of the MySQL Cluster component: General database management systems related to MySQL Cluster are vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain read, modify, add, or delete access to data, or cause service failures...
MAL-2025-3594 Malicious code in ui-platform-base-components-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ui-platform-base-components-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in easyship-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3550 Malicious code in easyship-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stihqvdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...
UBUNTU-CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...
Authentication Bypass
OctoPrint is vulnerable to Authentication Bypass. The vulnerability is due to insufficient authentication checks allowing direct access to rendered HTML of certain frontend pages. Attackers can exploit this to potentially access sensitive UI components...
MAL-2025-3425 Malicious code in va-report-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in va-report-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fcw-dashboard-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3398 Malicious code in fcw-dashboard-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3372 Malicious code in @sporta-technology/rn-components.appbar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/rn-components.appbar (npm)
--- -= Per source details. Do not edit below this line.=-...