Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/07/30 4:07 p.m.•17 views

Malicious Package

Overview decimal-format-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/13 6:49 a.m.•15 views

Malicious Package

Overview decimal-format-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/30 12:00 a.m.•30 views

Malicious code in console-fmt-cli (npm)

Malicious npm package published as part of a coordinated DeFi-themed infostealer campaign. console-fmt-cli uses a side-loader technique: it declares decimal-format-core =3.0 as a dependency, which contains a dropper that executes at install time via a postinstall hook. The dropper fetches a...

5.9AI score
SaveExploits0References13
OSV
OSV
•added 2026/06/24 3:59 a.m.•13 views

MAL-2026-6368 Malicious code in decimal-format-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864677541e3090100ca588a37d8eb525f74817ade2fce5cb3e265af45b0c4e9a The postinstall script scripts/sync-peer.cjs runs npm pack [email protected] or whatever version is configured via...

6.6AI score
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2017/01/10 12:00 a.m.•56 views

Adobe Reader DC XSLT decimal-format Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XSLT's...

9.3CVSS3.5AI score0.2042EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2010/03/01 12:00 a.m.•51 views

AST-2010-003: Invalid parsing of ACL rules can compromise security

Asterisk Project Security Advisory - AST-2010-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Invalid parsing of ACL rules can compromise | | | security |...

7.5AI score
SaveExploits0
Rows per page
Query Builder