771 matches found
EUVD-2023-60438
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in initsmb2rsphdr When smb1 mount fails, KASAN detect slab-out-of-bounds in initsmb2rsphdr like the following one. For smb1 negotiate56bytes , initsmb2rsphdr for smb2 is called. The issue occurs whil...
EUVD-2025-205685
A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be...
EUVD-2025-204020
A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...
MAL-2025-192508 Malicious code in elf-stats-jolly-ornament-687 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c696ff217f3b5fb230585fa3669d644df5d07b6d686687fa50639da0dbaacea7 The package elf-stats-jolly-ornament-687 was found to contain malicious code...
MAL-2025-192503 Malicious code in elf-stats-fuzzy-workbench-102 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6885087c0bc44815f87570e3ea126e735bb65b5f4cb443a1adc04915c7ac8959 The package elf-stats-fuzzy-workbench-102 was found to contain malicious code...
MAL-2025-192540 Malicious code in elf-stats-twinkling-wishlist-283 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a452b742f4800816cfb6c0ba402349ea379403ebbecc9c9d092416096336a The package elf-stats-twinkling-wishlist-283 was found to contain malicious code...
MAL-2025-192496 Malicious code in elf-stats-evergreen-satchel-868 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3612299385305c5a1cd65f55917676d9691d4bc50302824f775e7b676d44b599 The package elf-stats-evergreen-satchel-868 was found to contain malicious code...
Malicious Package
Overview allow-deny is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in elf-stats-cheery-chimney-392 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29de96c126bbcd60fca9d21e841b70b86313faf1c9921770856b9c932f17a11c The package elf-stats-cheery-chimney-392 was found to contain malicious code...
Malicious code in elf-stats-gingersnap-reindeer-987 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf3bd13952debf2913d3cda7026de4722754e97a2ad38af412cd86522ab9313 The package elf-stats-gingersnap-reindeer-987 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191519 Malicious code in mongodb-stitch-server-testutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d66acdf1a1a865257cb91b34cf535addabd337679e38741e5f0c1f89aa0b9b The package mongodb-stitch-server-testutils was found to contain malicious code...
MAL-2025-191090 Malicious code in fat-fingered (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5e127ac8099a8bee6fc42a5c3911a275384f00af4cd97082dde08a2bf2704f The package fat-fingered was found to contain malicious code. Source: ghsa-malware 77d5770972318f63a00eb2722c056f2e554e8970abd97f94cba9a3dde292a8d8 A...
Liferay Portal JSON Web Services Detected
This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly exposes the JSON web services. No source data...
MAL-2025-190546 Malicious code in node-calculator-feea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb1a64b7f2fc6b55b2801e47c270a7f2ec6e8f80ba3c0689b044d9621131031 The package node-calculator-feea was found to contain malicious code...
Malicious code in node-calculator-215d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3198d6c12dadf6d9c769d208f18cd0ad966ccffa92b0db40b2cb25f0fb9335a The package node-calculator-215d was found to contain malicious code...
Linux kernel Function Heap Buffer Overflow DoS
The vulnerability of the ath12kwmipdevdfsradardetectedevent function in the drivers/net/wireless/ath/ath12k/wmi.c module of the Linux kernel is related to the reallocation of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of...
MAL-2025-141066 Malicious code in configstore-titan-spica-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112169
Malicious code in jovian-cypress-jest-janus npm...