Lucene search
K

4406 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.3 views

Malicious code in opencv-doc-zh (npm)

The package opencv-doc-zh was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/09/05 5:10 p.m.2 views

MAL-2025-45666 Malicious code in pytorch-doc-zh (npm)

The package pytorch-doc-zh was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/09/05 4:22 a.m.8 views

CVE-2025-9785

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

7.7CVSS7AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2025/09/03 5:15 a.m.6 views

CVE-2025-9785

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

7.7CVSS0.00106EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.2 views

PaperCut Print Deploy 安全漏洞

PaperCut Print Deploy is a print queue deployment component from PaperCut Australia. A security vulnerability exists in PaperCut Print Deploy that stems from insufficient documentation of SSL configuration, which could lead to a man-in-the-middle attack...

7.7CVSS6.5AI score0.00106EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/29 6:55 p.m.6 views

Malicious code in solidity-utils-docify (npm)

The package solidity-utils-docify was found to contain malicious code...

7AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2025/08/28 6:49 p.m.6 views

Metasploit Weekly Wrap-Up 08/28/2025

New module content 2 Pretalx Arbitrary File Read/Limited File Write Authors: Stefan Schiller and msutovsky-r7 Type: Auxiliary and Exploit Pull request: 20480 contributed by msutovsky-r7 Path: auxiliary/scanner/http/pretalxfilereadcve202328459 and exploit/linux/http/pretalxrcecve202328458 Attacker...

10CVSS7AI score0.35256EPSS
Exploits10
vulnersOsv
vulnersOsv
added 2025/08/27 11:12 p.m.2 views

@alfresco/aca-generators (>=1.0.0 <=1.0.1), @alfresco/adw-generators (>=1.0.0 <=1.0.1) +98 more potentially affected by CVE-2025-10894 via nx (>=21.5.1-beta.3 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.5.1-beta.3, =1.0.0, =1.0.0, =0.0.1, =11.0.0, =0.52.0, =2.23.0, =0.7.10, =1.0.0, =3.22.0, =9.0.0-next.68, =1.4.0, =3.1.1, =1.0.0, =1.1.2 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

9.6CVSS5.4AI score0.00527EPSS
Exploits0
Fedora
Fedora
added 2025/08/26 1:55 a.m.6 views

[SECURITY] Fedora 41 Update: python3-docs-3.13.7-1.fc41

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

7.5CVSS7.1AI score0.00586EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/08/26 12:0 a.m.4 views

Fedora: Security Advisory (FEDORA-2025-62fe746ed0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.00586EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/08/25 9:54 a.m.5 views

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...

7.5CVSS6.8AI score0.00311EPSS
Exploits0References4
Veracode
Veracode
added 2025/08/25 8:59 a.m.4 views

Command Injection

mcp-package-docs is vulnerable to command injection. The vulnerability is due to unsanitized input passed to childprocess.exec, which allows an attacker to inject arbitrary system commands and achieve remote code execution under the server process's privileges...

7.5CVSS8.7AI score0.08088EPSS
Exploits0References15Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/21 5:17 p.m.5 views

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

6.9AI score
Exploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/20 4:30 p.m.6 views

Malicious code in python-amazon-doc-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17e1f33275376bf6eef8f0ff4a1f42b8a45bada7b53462c827f397b7554bc2b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
Exploits0References1
GithubExploit
GithubExploit
added 2025/08/20 1:52 p.m.86 views

docs

It is an of...

7.1AI score
Exploits0
Akamai Blog
Akamai Blog
added 2025/08/19 10:20 a.m.4 views

OpenAPI Documentation for Spin Apps with Rust

Learn how to create, customize, and serve OpenAPI Documentation from within Spin apps written in Rust...

5.7AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/08/18 12:0 a.m.3 views

AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generation

Incident response IR requires fast, coordinated, and well-informed decision-making to contain and mitigate cyber threats. While large language models LLMs have shown promise as autonomous agents in simulated IR settings, their reasoning is often limited by a lack of access to external knowledge. ...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in metaoffice-documentation (npm)

The package metaoffice-documentation was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-32863 Malicious code in seaborn-doc-zh (npm)

The package seaborn-doc-zh was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-26239 Malicious code in metaoffice-documentation (npm)

The package metaoffice-documentation was found to contain malicious code...

7.2AI score
Exploits0
Rows per page
Query Builder