Lucene search
+L

10577 matches found

Github Security Blog
Github Security Blog
•added 2025/04/30 9:10 a.m.•4 views

Malware in easyship-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/04/30 9:10 a.m.•13 views

MAL-2025-3550 Malicious code in easyship-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/30 12:00 a.m.•28 views

Linux kernel DRM/STI DoS

The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stihqvdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00207EPSS
SaveExploits0References13Affected Software7
attackerkb
attackerkb
•added 2025/04/29 1:15 p.m.•15 views

CVE-2025-4035

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...

4.3CVSS5.8AI score0.00438EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/04/29 1:15 p.m.•18 views

UBUNTU-CVE-2025-4035

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...

4.3CVSS5.7AI score0.00438EPSS
SaveExploits0References3
Veracode
Veracode
•added 2025/04/28 9:16 a.m.•18 views

Authentication Bypass

OctoPrint is vulnerable to Authentication Bypass. The vulnerability is due to insufficient authentication checks allowing direct access to rendered HTML of certain frontend pages. Attackers can exploit this to potentially access sensitive UI components...

4.3CVSS6.7AI score0.00246EPSS
SaveExploits0References5Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 4:04 p.m.•11 views

Malicious code in va-report-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 4:04 p.m.•11 views

MAL-2025-3425 Malicious code in va-report-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:50 p.m.•6 views

Malicious code in fcw-dashboard-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:50 p.m.•7 views

MAL-2025-3398 Malicious code in fcw-dashboard-components (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•10 views

Malicious code in @sporta-technology/rn-components.appbar (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•12 views

MAL-2025-3372 Malicious code in @sporta-technology/rn-components.appbar (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•16 views

MAL-2025-3369 Malicious code in @sporta-technology/d11-web-components.typography (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•14 views

Malicious code in @sporta-technology/d11-web-components.typography (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•16 views

MAL-2025-3368 Malicious code in @sporta-technology/d11-web-components.tooltip (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•14 views

Malicious code in @sporta-technology/d11-web-components.tooltip (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•19 views

MAL-2025-3367 Malicious code in @sporta-technology/d11-web-components.toggle-button (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•14 views

Malicious code in @sporta-technology/d11-web-components.toggle-button (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:41 p.m.•13 views

Malicious code in @sporta-technology/d11-web-components.timeline (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/23 3:41 p.m.•17 views

MAL-2025-3365 Malicious code in @sporta-technology/d11-web-components.timeline (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder