431 matches found
EUVD-2025-54846
Malicious code in distinguished-harlequin-moth npm...
EUVD-2025-54848
Malicious code in distinguished-blue-lizard npm...
EUVD-2025-54849
Malicious code in distinguished-blue-aardvark npm...
Malicious code in distinguished-azure-snake (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca8fce8f2a4a32feeb5062ac8dcb2db3013d1220a1d8900ac5556164710929e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54851
Malicious code in distinguished-azure-damselfly npm...
MAL-2025-67805 Malicious code in distinguished-silver-unicorn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d76ceeffc278ca6cae12d3112781243653f486152e24f0cfa1fb26298bb2d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-60060
Malicious code in distinguishedbobcatz3n npm...
EUVD-2025-48069
Malicious code in distinguishedrattlesnakez3n npm...
BIT-GOLANG-2025-58185 Parsing DER payload can cause memory exhaustion in encoding/asn1
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
Parsing DER payload can cause memory exhaustion in encoding/asn1
...
EUVD-2025-36734
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
CVE-2025-58185
CVE-2025-58185 concerns Go’s encoding/asn1 DER payload parsing. The advisory notes that memory can be exhausted when big, unvalidated DER payloads are parsed, affecting functions such as asn1.Unmarshal, x509.ParseCertificateRequest, and ocsp.ParseResponse. This memory-allocation issue arises befo...
CVE-2025-58185 Parsing DER payload can cause memory exhaustion in encoding/asn1
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
GO-2025-4011 Parsing DER payload can cause memory exhaustion in encoding/asn1
Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
Google Go 安全漏洞
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from the possibility of allocating a large amount of memory when parsing a specially crafted DER payload, leading to...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2025-1239)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1239 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL...
Identity Spoofing
org.igniterealtime.openfire, xmppserver is vulnerable to identity spoofing. The vulnerability is due to regex-based extraction of the Common Name CN from an unescaped, provider-dependent Distinguished Name DN string, which allows an attacker to impersonate other users using crafted certificate...
CVE-2025-61912
python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...
CVE-2025-61912
CVE-2025-61912 concerns python-ldap prior to 3.4.5, where ldap.dn.escape_dn_chars() escapes the NUL byte as a backslash-NUL instead of the RFC‑4514 form \00. This can cause client-side denial of service when untrusted input is used to construct DNs, as requests may be dropped before contacting an...