31629 matches found
EUVD-2025-199359
Malicious code in prompt-eng-server npm...
EUVD-2025-199344
Malicious code in @accordproject/template-engine npm...
Malicious code in @accordproject/template-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191177 Malicious code in @accordproject/template-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...
Inside Track 加密问题漏洞
Inside Track is a horse racing betting engine by the individual developer Lumina Mescuwa. Inside Track suffers from an encryption issue vulnerability that stems from the VDF encryption system not enforcing a sequential delay, which could lead to immediate decryption...
PT-2025-47978
Name of the Vulnerable Software and Affected Versions Inside Track / Entropy Derby versions prior to commit 2d38d2f Description The VDF-based timelock encryption system in Inside Track / Entropy Derby fails to enforce sequential delay against the betting operator. This allows bettors to pre-compu...
Malicious code in @opentermsarchive/engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191044 Malicious code in @opentermsarchive/engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199105
Malicious code in @opentermsarchive/engine npm...
Malicious code in firestore-search-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191092 Malicious code in firestore-search-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199221
Malicious code in firestore-search-engine npm...
Redis: Redis Lua Use-After-Free may lead to remote code execution
A vulnerability found in Redis where a flaw in the Lua scripting engine can trigger a use-after-free condition. An authenticated attacker can exploit this by running a specially crafted Lua script, potentially resulting in remote code execution RCE within the Redis process...
Exploit for CVE-2025-64087
CVE-2025-64087 SSTI FreeMarker Server-Side Template Injec...
Ubuntu 16.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7875-1)
"The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7875-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation betwe...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
...
Server-Side Template Injection
github.com/lxc/lxd is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper handling of snapshot pattern templates using the Pongo2 template engine, which allows an attacker with instance-configuration permissions to craft malicious templates and read arbitrary...