Malicious code in interface-signal-encode-authorize-big (npm)

The package interface-signal-encode-authorize-big was found to contain malicious code...

MAL-2025-32672 Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

MAL-2025-20702 Malicious code in float-module-export-encode-parse (npm)

The package float-module-export-encode-parse was found to contain malicious code...

MAL-2025-38455 Malicious code in virtualize-encode-fire-sudo-finally (npm)

The package virtualize-encode-fire-sudo-finally was found to contain malicious code...

MAL-2025-36803 Malicious code in theta-encode-daemon-rho-rain (npm)

The package theta-encode-daemon-rho-rain was found to contain malicious code...

MAL-2025-39767 Malicious code in xi-shell-zeta-assert-encode (npm)

The package xi-shell-zeta-assert-encode was found to contain malicious code...

MAL-2025-19087 Malicious code in easy-encode-notify-emulate-cache (npm)

The package easy-encode-notify-emulate-cache was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-30348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later dat...

The vulnerability of the encode_image function in the framework for working with Large Language Models (LLM) like LlamaIndex arises from an incorrect limitation on the path name to the restricted-access catalog. This vulnerability allows attackers to disclose protected information.

The vulnerability of the encodeimage function in the LlamaIndex framework, which is used for working with large language models, is related to an incorrect restriction on the path name of the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose...

PT-2025-30676 · Wwbn +1 · Avideo +1

Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 14.4 WWBN AVideo dev master commit 8a8954ff Description: A cross-site scripting xss issue exists in the LoginWordPress loginForm cancelUri parameter functionality. A crafted HTTP request can lead to arbitrary Javascript...

Thinkgem JeeSite 代码注入漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform for China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

AZL-65048 CVE-2025-7345 affecting package gdk-pixbuf2 for versions less than 2.40.0-8

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the encodeimage function. An attacker can access arbitrary files on the server by supplying crafted imagepath values...

CVE-2025-6209 Arbitrary File Read through Path Traversal in run-llama/llama_index

A path traversal vulnerability exists in run-llama/llamaindex versions 0.12.27 through 0.12.40, specifically within the encodeimage function in genericutils.py. This vulnerability allows an attacker to manipulate the imagepath input to read arbitrary files on the server, including sensitive syste...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the ImagingBcnEncode function. An attacker can cause memory corruption or potentially execute arbitrary code by saving a specially crafted, large DDS image file as compressed data. Note: This is only...

SUSE CVE-2025-6816

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...

The vulnerability of the H5O__layout_encode function in the H5Olayout.c component of the HDF file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Olayoutencode function in the H5Olayout.c component of the HDF file processing library is related to the escape of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially created...

AZL-64437 CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...

AZL-64413 CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...

DEBIAN-CVE-2025-6816

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...