350 matches found
EUVD-2025-117444
Malicious code in difficult-orange-dove npm...
EUVD-2025-79425
Malicious code in difficultmulez3n npm...
EUVD-2025-79426
Malicious code in difficultbutterflyz3n npm...
EUVD-2025-82209
Malicious code in difficultpanther0xrequest npm...
EUVD-2025-64530
Malicious code in difficultwolverinerequirement npm...
EUVD-2025-64532
Malicious code in difficultjackalz3n npm...
EUVD-2025-86480
Malicious code in difficultwallabyz3n npm...
EUVD-2025-54895
Malicious code in difficult-turquoise-stingray npm...
Malicious code in difficult-turquoise-stingray (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c3364341e8864a47d15cee7b7842ed57e7bc5c54c2d824563fdc1c47eb67c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-60071
Malicious code in difficultswallowz3n npm...
CVE-2025-12915
A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...
CVE-2025-12286 VeePN AVService avservice.exe unquoted search path
A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files x86\VeePN\avservice\avservice.exe of the component AVService. This manipulation causes unquoted search path. The attack requires local access. A high degree of complexity is needed f...
CVE-2025-11940 LibreWolf Installer setup.nsi uncontrolled search path
A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...
CVE-2025-11641
A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. This impacts an unknown function of the component Trial Restriction Handler. This manipulation causes improper access controls. It is feasible to perform the attack on the physical device. The attack is considered to have high...
CVE-2025-11636 Tomofun Furbo 360 Account server-side request forgery
A security vulnerability has been detected in Tomofun Furbo 360 up to FB0035FW036. This issue affects some unknown processing of the component Account Handler. Such manipulation leads to server-side request forgery. The attack can be executed remotely. This attack is characterized by high...
CVE-2025-11640: Cleartext Transmission of Sensitive Information
A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. This affects an unknown function of the component Bluetooth Low Energy. The manipulation results in cleartext transmission of sensitive information. Access to the local network is required for this attack. Attacks of this nature are...
EUVD-2015-1098
Malware in sbrugna...
EUVD-2017-11181
Malware in sbrugna...
EUVD-2025-32490
A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.users/new of the component User Creation Page. Executing manipulation of the argument Senha/Confirmação da senha can lead to weak password requirements. The attack can be launch...