1951 matches found
MAL-2025-23264 Malicious code in integer-stack-uglify-decrypt-dog (npm)
The package integer-stack-uglify-decrypt-dog was found to contain malicious code...
Malicious code in epsilon-tree-easy-decrypt-iota (npm)
The package epsilon-tree-easy-decrypt-iota was found to contain malicious code...
MAL-2025-30816 Malicious code in public-object-validate-user-decrypt (npm)
The package public-object-validate-user-decrypt was found to contain malicious code...
Malicious code in short-decrypt-mock-awk-function (npm)
The package short-decrypt-mock-awk-function was found to contain malicious code...
MAL-2025-33157 Malicious code in short-decrypt-mock-awk-function (npm)
The package short-decrypt-mock-awk-function was found to contain malicious code...
MAL-2025-22665 Malicious code in hot-decrypt-private-orchestrate-tau (npm)
The package hot-decrypt-private-orchestrate-tau was found to contain malicious code...
MAL-2025-17458 Malicious code in compress-decrypt-load-kernel-delta (npm)
The package compress-decrypt-load-kernel-delta was found to contain malicious code...
Malicious code in cache-omega-socket-decrypt-xml (npm)
The package cache-omega-socket-decrypt-xml was found to contain malicious code...
CVE-2025-55279
This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve private key stored in the firmware of the...
CVE-2025-55279 Hard-coded Private Key Vulnerability in ZKTeco WL20
This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve private key stored in the firmware of the...
ZKTeco WL20 Trust Management Vulnerability
The ZKTeco WL20 is an intelligent fingerprint time and attendance machine from China's Entropy Base Technology ZKTeco. The ZKTeco WL20 suffers from a trust management issue vulnerability that stems from a hard-coded private key stored in the device firmware, which could allow a physical access...
BIT-LIBPHP-2024-2408 PHP is vulnerable to the Marvin Attack
The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.com/openssl/openssl/pull/13817...
Bento4 Denial of Service Vulnerability (CNVD-2026-15392)
Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a denial of service vulnerability caused by a flaw in the Mp4Decrypt file Mp4Decrypt.cpp function AP4DataBuffer::SetDataSize. An attacker can exploit this vulnerability to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2020-10685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower...
CVE-2025-54366
FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...
FreeScout code issues and vulnerabilities
FreeScout is an open source helpdesk system built on the PHP Laravel framework, designed to provide users with functionality similar to Zendesk or Help Scout, but without sacrificing privacy or freedom. Freescout suffers from a deserialization vulnerability that stems from an application that...
CVE-2025-54366: Deserialization of Untrusted Data
FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...
CVE-2025-52374
Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...