4549 matches found
MAL-2025-45666 Malicious code in pytorch-doc-zh (npm)
The package pytorch-doc-zh was found to contain malicious code...
CVE-2025-9785
PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...
CVE-2025-9785
PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...
PaperCut Print Deploy 安全漏洞
PaperCut Print Deploy is a print queue deployment component from PaperCut Australia. A security vulnerability exists in PaperCut Print Deploy that stems from insufficient documentation of SSL configuration, which could lead to a man-in-the-middle attack...
Malicious code in solidity-utils-docify (npm)
The package solidity-utils-docify was found to contain malicious code...
Metasploit Weekly Wrap-Up 08/28/2025
New module content 2 Pretalx Arbitrary File Read/Limited File Write Authors: Stefan Schiller and msutovsky-r7 Type: Auxiliary and Exploit Pull request: 20480 contributed by msutovsky-r7 Path: auxiliary/scanner/http/pretalxfilereadcve202328459 and exploit/linux/http/pretalxrcecve202328458 Attacker...
@anarchitects/nx-js (>=0.0.1 <=0.0.3), @asd14/eslint-config (>=11.0.0 <=14.4.0) +76 more potentially affected by CVE-2025-10894 via nx (>=21.5.1-beta.3 <=21.7.0-canary.20250930-e144408)
nx NPM version =21.5.1-beta.3, =0.0.1, =11.0.0, =0.52.0, =2.23.0, =1.4.0, =3.1.1, =1.0.0, =6.10.0, =0.1.0-next.717, =9.0.0, =1.0.0, =0.0.1-alpha.7, =2.1.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...
[SECURITY] Fedora 41 Update: python3-docs-3.13.7-1.fc41
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
Fedora: Security Advisory (FEDORA-2025-62fe746ed0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release
The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...
Command Injection
mcp-package-docs is vulnerable to command injection. The vulnerability is due to unsanitized input passed to childprocess.exec, which allows an attacker to inject arbitrary system commands and achieve remote code execution under the server process's privileges...
Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3
Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...
Malicious code in python-amazon-doc-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 17e1f33275376bf6eef8f0ff4a1f42b8a45bada7b53462c827f397b7554bc2b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
OpenAPI Documentation for Spin Apps with Rust
Learn how to create, customize, and serve OpenAPI Documentation from within Spin apps written in Rust...
AutoBnB-RAG: Enhancing Multi-Agent Incident Response with Retrieval-Augmented Generation
Incident response IR requires fast, coordinated, and well-informed decision-making to contain and mitigate cyber threats. While large language models LLMs have shown promise as autonomous agents in simulated IR settings, their reasoning is often limited by a lack of access to external knowledge. ...
MAL-2025-26239 Malicious code in metaoffice-documentation (npm)
The package metaoffice-documentation was found to contain malicious code...
Malicious code in metaoffice-documentation (npm)
The package metaoffice-documentation was found to contain malicious code...
MAL-2025-32863 Malicious code in seaborn-doc-zh (npm)
The package seaborn-doc-zh was found to contain malicious code...
CVE-2025-8948
A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...