Lucene search
+L

31760 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 2:22 p.m.11 views

Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba56315cb27098d62accc35eb40d71fa885864ff9cf34271f632a07460df65ac The package @strapbuild/react-native-perspective-image-cropper was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2025/11/24 1:49 p.m.6 views

MAL-2025-190784 Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

6.8AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 1:39 p.m.8 views

Malicious code in react-native-use-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08891181ddf6d5d5a9b94c1742e17b2e3aaa9ed8fd8fdab8b22fbd163e86d6bf The package react-native-use-modal was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 11:45 a.m.11 views

Malicious code in @asyncapi/protobuf-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927e5dcfc89c461512068769c97bb06898751cd42cd15f50d97c4760c658269b The package @asyncapi/protobuf-schema-parser was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/24 11:33 a.m.11 views

CVE-2025-13548

A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been...

9CVSS7.1AI score0.00791EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/24 5:16 a.m.6 views

MAL-2025-190630 Malicious code in parse-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6800038c1b56247a0767faecf501d0c74de134197bb0edbae2d27b8a958547 The package parse-session was found to contain malicious code. Source: ghsa-malware 5b04d6ff25ce91de5057fed89547b08687055f2ca7a217a2886eecb79c06f9e9...

6.8AI score
SaveExploits0References3
OSV
OSV
added 2025/11/24 5:13 a.m.6 views

MAL-2025-190631 Malicious code in tailwind-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9713ae723aefcab52d65da5c1473fffe7835c37849c133d7cecffa7ba7284e66 The package tailwind-inquirer was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/24 12:00 a.m.10 views

PT-2025-47966

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

7.1CVSS6.6AI score0.00125EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.9 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to cause an out-of-bounds write...

5.5CVSS6.9AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/24 12:00 a.m.12 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to write to arbitrary physical...

5.5CVSS6.7AI score0.0011EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/23 6:30 p.m.10 views

EUVD-2024-19529

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

7.3CVSS7.5AI score0.00145EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/23 6:02 p.m.36 views

CVE-2025-13562 D-Link DIR-852 gena.cgi command injection

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

7.5CVSS0.06244EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/23 4:27 p.m.7 views

CVE-2024-21923

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

7.3CVSS7.7AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/23 2:15 p.m.17 views

CVE-2025-13552

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploi...

9CVSS0.00755EPSS
SaveExploits1References7
NVD
NVD
added 2025/11/23 1:15 p.m.12 views

CVE-2025-13550

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely. The exploit has bee...

9CVSS0.00755EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/11/23 12:00 a.m.13 views

PT-2025-47850

Name of the Vulnerable Software and Affected Versions AMD StoreMI affected versions not specified Description A configuration issue with default permissions in AMD StoreMI could allow an attacker to escalate privileges, potentially leading to arbitrary code execution. Recommendations At the momen...

7.3CVSS7AI score0.00145EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/11/22 12:00 a.m.11 views

Ubuntu 16.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7875-1)

"The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7875-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwe...

9.8CVSS7.6AI score0.01369EPSS
SaveExploits8References29
NVD
NVD
added 2025/11/21 10:16 p.m.18 views

CVE-2025-31216

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles...

2.4CVSS0.00154EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/21 9:30 p.m.9 views

EUVD-2025-198507

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

5.3CVSS6AI score0.00109EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/21 9:30 p.m.10 views

EUVD-2025-198504

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.1AI score0.0011EPSS
SaveExploits0References2
Rows per page
Query Builder