Malicious Package

Overview tw-webkit-universal is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

BIT-GOLANG-2025-47906 Unexpected paths returned from LookPath in os/exec

If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

Malicious code in huainanren-nvren-wufa-diyude-youhuo (npm)

The package huainanren-nvren-wufa-diyude-youhuo was found to contain malicious code...

The vulnerability of the btf_id_set_contains() function in the kernel/bpf/btf.c module, which supports the BPF interpreter in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btfidsetcontains function in the kernel/bpf/btf.c module, which supports BPF in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Distros Unpatched Vulnerability : CVE-2019-11187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the...

Malicious code in project-ykhjj-papa (npm)

The package project-ykhjj-papa was found to contain malicious code...

MAL-2025-39819 Malicious code in xigua-iceberg-69im (npm)

The package xigua-iceberg-69im was found to contain malicious code...

MAL-2025-8481 Malicious code in @malware-test-baler-foils-vibex-tynes/test-mlw3-baler-foils-vibex-tynes (npm)

The package @malware-test-baler-foils-vibex-tynes/test-mlw3-baler-foils-vibex-tynes was found to contain malicious code...

MAL-2025-13924 Malicious code in a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf (npm)

The package a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf was found to contain malicious code...

Malicious code in nectarine-mike-golf-fsydh (npm)

The package nectarine-mike-golf-fsydh was found to contain malicious code...

Malicious code in @malware-test-spend-daman-mouth-haets/test-mlw3-spend-daman-mouth-haets (npm)

The package @malware-test-spend-daman-mouth-haets/test-mlw3-spend-daman-mouth-haets was found to contain malicious code...

MAL-2025-21154 Malicious code in galenjiangfirtcommit (npm)

The package galenjiangfirtcommit was found to contain malicious code...

MAL-2025-9824 Malicious code in @zalastax/nolb-_bid (npm)

The package @zalastax/nolb-bid was found to contain malicious code...

VulnCheck KEV: CVE-2000-0984

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service crash and reload via a URL containing a "?/" string...

CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

Cosmos: Heap-Buffer-Overread in contains_whitespace when calling parser_validate after supplying a maliciously crafted buffer to parser_parse

A heap-buffer-overread vulnerability was discovered in the containswhitespace function when calling parservalidate after supplying a maliciously crafted buffer to parserparse. The vulnerability was not exploitable in the primary use case of the library, but a length check was added to prevent thi...

RLSA-2024:7463 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

SUSE CVE-2007-5925

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

SUSE CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

turismo.jardinopolis.sc.gov.br Cross Site Scripting vulnerability OBB-3099018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...