13458 matches found
Malicious code in discovery-player (npm)
The package discovery-player was found to contain malicious code...
Malicious code in garretts (npm)
The package garretts was found to contain malicious code...
MAL-2025-26480 Malicious code in misere (npm)
The package misere was found to contain malicious code...
MAL-2025-18495 Malicious code in discovery-player (npm)
The package discovery-player was found to contain malicious code...
Malicious code in xigua-lion-2hrd (npm)
The package xigua-lion-2hrd was found to contain malicious code...
Malicious code in elecsim (npm)
The package elecsim was found to contain malicious code...
Malicious code in family-island-unlimited-energy447 (npm)
The package family-island-unlimited-energy447 was found to contain malicious code...
CVE-2025-8452
By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default...
CVE-2025-55675 Apache Superset: Incorrect datasource authorization on REST API
Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasourceid in the URL, an attacker can...
Have You Turned Off Your Virtual Oven?
You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again to confirm the front door was properly closed. These automatic safety checks give you peace of mind because you know the unlike...
CVE-2024-40971
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2023-52853
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...
CVE-2024-26735
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...
CVE-2024-40932
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
CVE-2024-49867
creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
Flaw in Older Version of Android Rooting Tool KernelSU Allows Full Device Takeover
Zimperium's zLabs team uncovers a critical security flaw in the popular Android rooting tool, KernelSU v0.5.7. Learn how…...
Security Bulletin: Due to use of IBM WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is vulnerable to disclosure of information.
Summary IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Netty CVE-2024-47535CVE-2025-25193 Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high...
CVE-2025-537347
creationtimestamp| type| source ---|---|--- 2025-08-13 05:23:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0250...
CVE-2025-8614
creationtimestamp| type| source ---|---|--- 2025-08-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-835/ 2025-09-02 23:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvc5apitr2p...