Lucene search
K

316 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/15 3:18 a.m.3 views

Malicious code in abir-dl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a97ea2900bc67d022048b8bdcac52eeef776fb29fad42327fa1ceea2be6a1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/05/15 3:18 a.m.3 views

MAL-2025-3813 Malicious code in abir-dl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43a97ea2900bc67d022048b8bdcac52eeef776fb29fad42327fa1ceea2be6a1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.2 views

WordPress plugin DL Verification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.8CVSS4.8AI score0.00267EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.4 views

PT-2025-21497 · WordPress · Dl Verification Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: DL Verification WordPress plugin versions 1.2 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example,...

4.8CVSS4.6AI score0.00267EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.2 views

WordPress plugin DL Robots.txt 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS5.8AI score0.00556EPSS
Exploits1References1
OSV
OSV
added 2025/05/09 7:16 a.m.2 views

DEBIAN-CVE-2025-37871

In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sccount directly if fail to queue dlrecall A deadlock warning occurred when invoking nfs4putstid following a failed dlrecall queue operation: T1 T2 nfs4laundromat nfs4getclientreaplist nfs4anylockblockers breakleas...

5.5CVSS5.6AI score0.00066EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nfsd not properly handling a dlrecall queue failure, which could result in a reference count error...

5.5CVSS6.5AI score0.00066EPSS
Exploits0References7
vulnersOsv
vulnersOsv
added 2025/04/18 8:24 p.m.5 views

aij (>=1.0.14 <=1.2.10), aiotube (>=1.2.0 <=1.2.2) +357 more potentially affected by unknown CVE via youtube-dl (>=2015.9.22 <=2021.6.6)

youtube-dl PYPI version =2015.9.22, =1.0.14, =1.2.0, =0.0.1, =1.3.0, =0.1.0, =0.0.4, =0.0.1b1, =2.1.2, =0.4.6, =1.0.3, =0.0.2, =0.0.3 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-YOUTUBEDL-10116724...

5.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2025/04/18 8:24 p.m.20 views

youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

Description This advisory follows the security advisory GHSA-79w7-vh3h-8g4j published by the yt-dlp/yt-dlp project to aid remediation of the issue in the ytdl-org/youtube-dl project. Vulnerability youtube-dl does not limit the extensions of downloaded files, which could lead to arbitrary filename...

7.8CVSS7.2AI score0.00045EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2025/04/16 3:15 p.m.2 views

DEBIAN-CVE-2025-22025

In the Linux kernel, the following vulnerability has been resolved: nfsd: put dlstid if fail to queue dlrecall Before calling nfsd4runcb to queue dlrecall to the callbackwq, we increment the reference count of dlstid. We expect that after the corresponding workstruct is processed, the reference...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nfsd failing to release the dlstid reference count...

5.5CVSS6.5AI score0.00013EPSS
Exploits0References8
Fedora
Fedora
added 2025/04/06 1:21 a.m.8 views

[SECURITY] Fedora 41 Update: crosswords-puzzle-sets-xword-dl-0.4.8-1.fc41

Download crossword puzzles for GNOME Crosswords from assorted newspapers using xword-dl...

5.6CVSS7.2AI score0.00074EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/04/06 12:0 a.m.12 views

Fedora 41 : crosswords-puzzle-sets-xword-dl (2025-90f88da466)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-90f88da466 advisory. Update to 0.4.8; Fixes: RHBZ2237964, RHBZ2282129 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

5.6CVSS6.4AI score0.00074EPSS
Exploits0References2
Fedora
Fedora
added 2025/03/30 12:18 a.m.7 views

[SECURITY] Fedora 42 Update: crosswords-puzzle-sets-xword-dl-0.4.8-1.fc42

Download crossword puzzles for GNOME Crosswords from assorted newspapers using xword-dl...

5.6CVSS5.9AI score0.00074EPSS
Exploits0
NVD
NVD
added 2025/03/06 6:15 p.m.7 views

CVE-2024-52923

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Lack of a boundary check during the decoding of DL NAS...

7.5CVSS0.00186EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/05 1:44 p.m.12 views

CVE-2025-26585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DyadyaLesha DL Leadback dl-leadback allows Reflected XSS.This issue affects DL Leadback: from n/a through = 1.2.1...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-38519

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded...

7.8CVSS6.1AI score0.00045EPSS
Exploits0References3
NVD
NVD
added 2025/03/03 2:15 p.m.5 views

CVE-2025-26585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DyadyaLesha DL Leadback dl-leadback allows Reflected XSS.This issue affects DL Leadback: from n/a through = 1.2.1...

7.1CVSS0.00232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.7 views

CVE-2025-26585 WordPress DL Leadback Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound DL Leadback allows Reflected XSS. This issue affects DL Leadback: from n/a through 1.2.1...

7.1CVSS7AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.61 views

CVE-2025-26585

CVE-2025-26585 — WordPress plugin DL Leadback is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in versions up to 1.2.1 due to improper input neutralization during web page generation. Public sources (NVD/Red Hat/CVE listings) describe the flaw as DL Leadback: notcapped escalati...

7.1CVSS7.2AI score0.00232EPSS
Exploits0References1
Rows per page
Query Builder