EUVD-2025-175819

Malicious code in unix-earth-zero-decrypt-log npm...

EUVD-2025-179349

Malicious code in delta-encrypt-decrypt-process-hot npm...

EUVD-2025-177049

Malicious code in private-easy-string-decrypt-meta npm...

EUVD-2025-175881

Malicious code in tree-notify-report-decrypt-scale npm...

EUVD-2025-175957

Malicious code in thread-compile-parse-decrypt-air npm...

EUVD-2025-176375

Malicious code in simple-file-omicron-function-decrypt npm...

EUVD-2025-177179

Malicious code in pi-permission-debug-decrypt-slow npm...

EUVD-2025-179374

Malicious code in decrypt-import-info-optimize-authorize npm...

Malicious code in delta-encrypt-decrypt-process-hot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47be4747508a9978698f14c3a6e3c22e2b2fd3bfe34ece2ef5c5445dfc296dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176951

Malicious code in proxy-decrypt-bad-byte-cat npm...

EUVD-2025-175883

Malicious code in tree-function-kappa-decrypt-assert npm...

EUVD-2025-175898

Malicious code in transpile-bundle-upsilon-decrypt-secure npm...

EUVD-2025-180523

Malicious code in abstract-decrypt-async-public-phi npm...

MAL-2025-186511 Malicious code in decrypt-xml-compress-moon-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd29dfb05cee6c5ddaf5d6fc7511c903cc2572f128025c139bb45606c8a4d1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Lexmark Printers Disclosure of Information (CVE-2019-1559)

A vulnerability in the TLS protocol in Lexmark devices has been identified that can be exploited by a “Man In The Middle” attacker to decrypt data in the TLS stream. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503882; scriptversion"1.3";...

CVE-2025-63675

cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aesdecryptmessage in symmetricencryption.py...

Deserialization of Untrusted Data

Overview cryptidy is a Python high level library for symmetric & asymmetric encryption Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the aesdecryptmessage function. An attacker can execute arbitrary code by supplying crafted data that is deserialized...

CVE-2025-63675

cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aesdecryptmessage in symmetricencryption.py...

PT-2025-44585

Name of the Vulnerable Software and Affected Versions cryptidy versions through 1.2.4 Description The software allows code execution due to the use of pickle.loads with untrusted data. This issue occurs within the aes decrypt message function located in the symmetric encryption.py file...

CVE-2025-63675

cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used. This occurs in aesdecryptmessage in symmetricencryption.py...