24412 matches found
Malicious code in z-shop-event-bus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db54dce43d20da63e308cbd0ae4785225d093b5bd8b5d7c202e0f17a19ba11c2 The package z-shop-event-bus was found to contain malicious code. Source: ghsa-malware 4e51cf3a7018daddc8f2ba956f6e030ec57f8bad1e45102d29243c9dd13d48...
MAL-2026-726 Malicious code in z-shop-event-bus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db54dce43d20da63e308cbd0ae4785225d093b5bd8b5d7c202e0f17a19ba11c2 The package z-shop-event-bus was found to contain malicious code. Source: ghsa-malware 4e51cf3a7018daddc8f2ba956f6e030ec57f8bad1e45102d29243c9dd13d48...
CVE-2025-58344
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/connlogeventbursttous write operation, leading to kernel memory...
Linux Distros Unpatched Vulnerability : CVE-2025-71198
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: imu: stlsm6dsx: fix iiochanspec for sensors without event detection The stlsm6dsxaccchannels array of struct iiochanspec has a non-NULL eventspec field,...
OctoPrint 1.11.2 - File Upload
Exploit Title: OctoPrint 1.11.2 - File Upload Date: 2025-09-28 Exploit Author: prabhatverma.addada Vendor Homepage: https://octoprint.org Software Link: https://github.com/OctoPrint/OctoPrint Affected Versions: = 1.11.2 Patched Versions: 1.11.3 CVE: CVE-2025-58180 CVSS per advisory: 7.5 Platform:...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of sensors that do not support event detection. This vulnerability may lead to null...
GHSA-GCQQ-FXW6-F866
creationtimestamp| type| source ---|---|--- 2026-02-03 19:22:40+00:00| seen| Telegram/nt-q5yNevYWKqqRy2ZSijClK6WEfDxXAX6mzKiCUgPYppMI...
EUVD-2026-5213
Cross-Site Request Forgery CSRF vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through = 5.1.1...
CVE-2025-67850
creationtimestamp| type| source ---|---|--- 2026-02-03 13:16:27+00:00| seen| Telegram/fpMcrY2RALMfsN1onUqQsHu7uTJCJuSmLnazyi9cvEQogc...
CVE-2026-1058
creationtimestamp| type| source ---|---|--- 2026-02-03 09:17:08+00:00| seen| Telegram/FqzbYeVrA83bKBXihn9RsWwSkEuF36kvwdGphoUN0o5eRo...
Insertion of Sensitive Information Into Sent Data
Overview mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others. Note: This package is not maintained on Packagist anymore, but newer releases exist. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data...
CVE-2026-20403
creationtimestamp| type| source ---|---|--- 2026-02-03 00:15:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3eiudex22...
EUVD-2025-206700
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 2200, 1330, 1380, 1480, 1580, W920, W930, and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/connlogeventbursttous write operation, leading to kernel...
CVE-2025-58344
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/connlogeventbursttous write operation, leading to kernel memory...
CVE-2025-12680
CVE-2025-12680 affects Brocade SANnav prior to version 2.4.0b. In the event of disaster-recovery failover, the standby SANnav server logs database passwords in clear text, enabling a remote authenticated attacker with admin privileges to read the passwords from SANnav logs or the supportsave. The...
CVE-2026-22223
creationtimestamp| type| source ---|---|--- 2026-02-02 19:21:16+00:00| seen| Telegram/l5GdkV3EN00CMaI5xyso-xNuPLT0g7uF7hgOrEpSdA-D9FY...
CVE-2026-0630
creationtimestamp| type| source ---|---|--- 2026-02-02 19:20:36+00:00| seen| Telegram/PNVA6DRRCu6uWOBL3siVeUJTp6kTW4zRfFwbHDecqfFIqhQ...
CVE-2026-24471
The CVE-2026-24471 issue affects Continuwuity and Conduit-derived servers (Continuwuity, Conduit, Grapevine, Tuwunel). A malicious remote server can induce the victim to sign an arbitrary event during user interactions such as leaving a room, joining a room, or knocking on a room, by requesting a...
CVE-2025-47366
creationtimestamp| type| source ---|---|--- 2026-02-02 17:21:06+00:00| seen| Telegram/N4lnT3bQ1VXvzXPAYAVlLYFHvVq2Vng1nuOYegKOFUWHs...
CVE-2026-1761
creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv237qncn23 2026-03-01 14:34:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfyxj4qruk2s...