CVE-1999-0781

KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables...

Exposure of Sensitive Information Through Environmental Variables

Overview gac is a LLM-powered Git commit message generator with multi-provider support Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Environmental Variables via the show function, which shows all environment variable values without redaction...

CVE-2023-53895

PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...

CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint

PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity

The increasing complexity of cyber threats in distributed environments demands advanced frameworks for real-time detection and response across multimodal data streams. This paper introduces AgenticCyber, a generative AI powered multi-agent system that orchestrates specialized agents to monitor...

How CVSS v4.0 works: characterizing and scoring vulnerabilities

The Common Vulnerability Scoring System CVSS provides software developers, testers, and security and IT professionals with a standardized way to assess vulnerabilities. You can use CVSS to assess the threat level of each vulnerability and then prioritize mitigation accordingly. This article...

SoK: Security Evaluation of Wi-Fi CSI Biometrics: Attacks, Metrics, and Systemic Weaknesses

Wi-Fi Channel State Information CSI has been repeatedly proposed as a biometric modality, often with reports of high accuracy and operational feasibility. However, the field lacks a consolidated understanding of its security properties, adversarial resilience, and methodological consistency. This...

EUVD-2025-105557

Malicious code in environmentalgrousez3n npm...

EUVD-2025-92232

Malicious code in environmentalstarfishz3n npm...

EUVD-2025-92233

Malicious code in environmentaldormousez3n npm...

EUVD-2025-76960

Malicious code in environmentalswift-smiletea npm...

EUVD-2025-79319

Malicious code in environmentalwallabyz3n npm...

EUVD-2025-70637

Malicious code in environmentalrhinocerosz3n npm...

MAL-2025-102144 Malicious code in environmental_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc1cc17f232f2575d24be8f16d4287146b40d75a90afb17d7a813806b958cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71587

Malicious code in environmentalplatypusz3n npm...

Malicious code in environmental_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64b01e74eb3dc81422ebd71573d35950ef5afca35480a8e25df3fabd2004283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64277

Malicious code in environmentalparrotfishz3n npm...

EUVD-2025-64278

Malicious code in environmentalleechz3n npm...

EUVD-2025-64276

Malicious code in environmentaltoadz3n npm...