Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

...

CVE-2025-9796 thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting

A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made...

Thinkgem JeeSite 安全漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

PUB-A-394583415

In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2020-21548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c. CVE-2020-21548 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2021-36770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working...

Malicious code in zeta-fire-throw-dog-encode (npm)

The package zeta-fire-throw-dog-encode was found to contain malicious code...

Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-38455 Malicious code in virtualize-encode-fire-sudo-finally (npm)

The package virtualize-encode-fire-sudo-finally was found to contain malicious code...

MAL-2025-25470 Malicious code in load-hot-info-delta-encode (npm)

The package load-hot-info-delta-encode was found to contain malicious code...

MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-23274 Malicious code in interface-signal-encode-authorize-big (npm)

The package interface-signal-encode-authorize-big was found to contain malicious code...

Malicious code in theta-encode-daemon-rho-rain (npm)

The package theta-encode-daemon-rho-rain was found to contain malicious code...

Malicious code in easy-encode-notify-emulate-cache (npm)

The package easy-encode-notify-emulate-cache was found to contain malicious code...

MAL-2025-20583 Malicious code in fire-new-encode-fire-transpile (npm)

The package fire-new-encode-fire-transpile was found to contain malicious code...

MAL-2025-26217 Malicious code in meta-error-secure-encode-refactor (npm)

The package meta-error-secure-encode-refactor was found to contain malicious code...

MAL-2025-34573 Malicious code in tau-encode-web-sed-small (npm)

The package tau-encode-web-sed-small was found to contain malicious code...

Malicious code in load-hot-info-delta-encode (npm)

The package load-hot-info-delta-encode was found to contain malicious code...

MAL-2025-40960 Malicious code in zeta-fire-throw-dog-encode (npm)

The package zeta-fire-throw-dog-encode was found to contain malicious code...

MAL-2025-32476 Malicious code in route-promise-class-file-encode (npm)

The package route-promise-class-file-encode was found to contain malicious code...