EUVD-2025-52614

Malicious code in professional-maroon-echidna npm...

EUVD-2025-54251

Malicious code in forthcoming-copper-echidna npm...

EUVD-2025-53384

Malicious code in main-rose-echidna npm...

EUVD-2025-51701

Malicious code in sunny-aquamarine-echidna npm...

EUVD-2025-52767

Malicious code in petite-lavender-echidna npm...

EUVD-2025-51934

Malicious code in sophisticated-indigo-echidna npm...

EUVD-2025-51347

Malicious code in unique-black-echidna npm...

EUVD-2025-54159

Malicious code in fuzzy-jade-echidna npm...

EUVD-2025-52027

Malicious code in silky-rose-echidna npm...

EUVD-2025-55935

Malicious code in agricultural-aqua-echidna npm...

EUVD-2025-55885

Malicious code in amazing-scarlet-echidna npm...

Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56078

Malicious code in above-apricot-echidna npm...

Malicious code in sunny-aquamarine-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c2d34aa007b538b12025943cff1b6af639205f208a3697286b29e0260ccf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51932

Malicious code in sophisticated-lavender-echidna npm...

EUVD-2025-49058

Malicious code in weakechidnaz3n npm...

finalise() lacks authenticate calls to this method as anyone can access it.

Lines of code Vulnerability details Impact Unprotected call to a function sending Ether to an arbitrary address. This can be exploited by attackers . Proof of Concept function finalize public Sale memory temp = sale; requireblock.number = temp.endTime, "TOO SOON";...

It is possible to burn someone's vault tokens

Lines of code Vulnerability details Impact It is possible to burn someone's vault tokens. Exploit Scenario Let's say Alice and Bob have some vault tokens. For some reason, Bob didn't grab an ice-cream for Alice, therefore Alice wanted to revenge for that. So she decided to burn Bob's vault tokens...

Bug inside ABDKMathQuad library

Handle adelamo Vulnerability details Impact FairSideFormula library is using ABDKMathQuad library underneath. According to the ABDKMathQuad README, the range of values is the following: The minimum strictly positive subnormal value is 2^−16494 ≈ 10^−4965 and has a precision of only one bit. The...

ScriptFTP 3.3 - Remote Buffer Overflow (MSF)

No description provided by source. Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 Msf::Exploit::Remo...