4708 matches found
GHSA-G7F3-828F-7H7M Authlib : JWE zip=DEF decompression bomb enables DoS
Summary Authlib’s JWE zip=DEF path performs unbounded DEFLATE decompression. A very small ciphertext can expand into tens or hundreds of megabytes on decrypt, allowing an attacker who can supply decryptable tokens to exhaust memory and CPU and cause denial of service. Details - Affected component...
EUVD-2025-31827
The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...
Linux Distros Unpatched Vulnerability : CVE-2025-59732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8. If the height or...
EUVD-2014-4543
Malware in sbrugna...
EUVD-2010-1340
Malware in sbrugna...
EUVD-2010-0097
Malware in sbrugna...
EUVD-2008-3918
Malware in sbrugna...
EUVD-2011-0041
Malware in sbrugna...
EUVD-2021-1531
Malware in sbrugna...
EUVD-2006-6943
Malware in sbrugna...
EUVD-2006-4542
Malware in sbrugna...
EUVD-2006-1632
Malware in sbrugna...
EUVD-2012-4379
Malware in sbrugna...
EUVD-2020-27087
Malware in sbrugna...
EUVD-2020-2654
Malware in sbrugna...
EUVD-2017-16614
Malware in sbrugna...
EUVD-2017-6548
Malware in sbrugna...
EUVD-2005-0852
Malware in sbrugna...