9 matches found
MAL-2026-12526 Malicious code in cards-forms-clone-debit-clone (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0f7b9b02ef9fef4376ec3f311e60acabe0881cd5ef1ffa503571bdce2158a4 On require, index.js loads bootstrap.js which reconstructs endpoint hostnames from split string fragments assembling .workers.dev hosts such as...
CVE-2026-15927
CVE-2026-15927: Red Hat Quay repository-level mirror feature allows SSRF via external_reference in POST/PUT to endpoints/api/mirror.py, not applying the stricter validate_external_registry_url() used by organization-level mirrors. This enables a repository administrator to craft a hostname that m...
EUVD-2020-18519
Malware in sbrugna...
CVE-2020-25887
Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...
Buffer overflow
Buffer overflow in mgresolvefromhostsfile in Mongoose 6.18, when reading from a crafted hosts file...
CVE-2020-25887
CVE-2020-25887 affects Cesanta Mongoose (v6.18) with a buffer overflow in the function mg_resolve_from_hosts_file when parsing a crafted hosts file. The issue is rooted in that host-resolution path, leading to potential memory corruption. The CVSS 3.1 base score is 8.8 (HIGH) with network attack ...
PT-2023-11742 · Mongoose · Mongoose
Name of the Vulnerable Software and Affected Versions: Mongoose version 6.18 Description: The issue is a buffer overflow in the mg resolve from hosts file function when reading from a crafted hosts file. This can occur in Mongoose 6.18. Recommendations: For Mongoose version 6.18, consider updatin...
