2344 matches found
EUVD-2025-2655
Malicious code in bioql PyPI...
EUVD-2022-7391
Malicious code in bioql PyPI...
EUVD-2022-2801
Malicious code in bioql PyPI...
EUVD-2023-2513
Malicious code in bioql PyPI...
EUVD-2022-5978
Malicious code in bioql PyPI...
EUVD-2024-2893
Malicious code in bioql PyPI...
EUVD-2023-3149
Malicious code in bioql PyPI...
EUVD-2022-1290
Malicious code in bioql PyPI...
EUVD-2025-6766
Malicious code in bioql PyPI...
EUVD-2025-23578
Malicious code in bioql PyPI...
Arbitrary Code Injection
electron is vulnerable to Arbitrary Code Injection. The vulnerability is due to modification of the resources folder when the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses are enabled, because these fuses fail to fully protect ASAR integrity on writable filesystems; an attacker wi...
Malicious code in @dropbox-photo-viewer/electron-app (npm)
The package @dropbox-photo-viewer/electron-app was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e60f8bd38264b681d07237c310d98471fc7bfc1b9ab2bfabf4258bf01a9ea9 Any computer that has this package installed or running should be...
Malicious Package
Overview @dropbox-photo-viewer/electron-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
MAL-2025-47523 Malicious code in @dropbox-photo-viewer/electron-app (npm)
The package @dropbox-photo-viewer/electron-app was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e60f8bd38264b681d07237c310d98471fc7bfc1b9ab2bfabf4258bf01a9ea9 Any computer that has this package installed or running should be...
The vulnerabilities of the `nativeImage.createFromPath()` and `nativeImage.createFromBuffer()` functions in the Electron framework allow attackers to gain unauthorized access to protected information.
The vulnerability of the nativeImage.createFromPath and nativeImage.createFromBuffer functions in the Electron framework for application development is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
vulhub
This is a pre-built vulnerable environment based on Docker-Compose, provided by the Vulhub project. The repository contains a collection of vulnerable applications and services, along with their corresponding Dockerfiles and configuration files. The vulnerable environments are designed to help...
SUSE CVE-2025-55305
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impac...
Malicious code in nashira-warp-electron-development (npm)
The package nashira-warp-electron-development was found to contain malicious code...