Lucene search
+L

4009 matches found

EUVD
EUVD
added 2025/11/11 4:25 a.m.3 views

EUVD-2025-86173

Malicious code in excessivemolluskz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.5 views

EUVD-2025-54503

Malicious code in excessive-violet-leopard npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.3 views

EUVD-2025-54504

Malicious code in excessive-red-fowl npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 12:17 a.m.4 views

Malicious code in excessive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf09b3479892c9b7b594ef95b85115765ce2c54cd0c64265f208d912c0ecaedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/10 6:02 p.m.3 views

EUVD-2025-50255

Malicious code in excessiveflyingfishz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/10 6:02 p.m.4 views

EUVD-2025-50256

Malicious code in excessivecondorz3n npm...

6.6AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/11/09 9:01 a.m.14 views

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

...

6.9CVSS6.8AI score0.0026EPSS
SaveExploits1
EUVD
EUVD
added 2025/11/07 10:59 p.m.8 views

EUVD-2025-38214

KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-controlled node. This vulnerability could...

6.9CVSS6.3AI score0.0026EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/07 5:20 a.m.36 views

CVE-2025-64343

CVE-2025-64343 affects the conda Constructor tool. In versions 3.12.2 and earlier, the installation directory inherits permissions from its parent, and outside restricted directories those permissions can permit write access by authenticated users. Any logged-in user could modify during installat...

7.8CVSS6AI score0.00119EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/06 3:08 p.m.54 views

BIT-MASTODON-2022-2166 Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon

Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0...

9.8CVSS9.5AI score0.01057EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/06 12:58 p.m.6 views

BIT-GOLANG-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

5.3CVSS6.9AI score0.00518EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/11/04 12:20 a.m.11 views

EUVD-2025-37509

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters due to a lack of server-side validation of note length. Once such a note is added,...

6.5CVSS6.2AI score0.00384EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/11/03 5:07 p.m.12 views

MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length

A lack of server-side validation for note length in MantisBT allows attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters. Once such a note is added: Impact - The entire activity stream becomes unviewable UI fails to render. - New...

7.5CVSS6.8AI score0.00384EPSS
SaveExploits0References6Affected Software1
Wired Threat Level
Wired Threat Level
added 2025/11/03 10:00 a.m.14 views

Hack Exposes Kansas City’s Secret Police Misconduct List

A major breach of the Kansas City, Kansas, Police Department reveals, for the first time, a list of alleged officer misconduct including dishonesty, sexual harassment, excessive force, and false arrest...

7AI score
SaveExploits0
CVE
CVE
added 2025/10/31 6:32 p.m.30 views

CVE-2025-12547

CVE-2025-12547 affects LogicalDOC Community Edition up to 9.2.1, targeting the Admin Login Page via the file /login.jsp . The root cause is an improper restriction of excessive authentication attempts, enabling remote brute‑force style access. The issue is described as high complexity with a publ...

8.1CVSS4.9AI score0.00811EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/10/31 6:32 p.m.22 views

CVE-2025-12547 LogicalDOC Community Edition Admin Login login.jsp excessive authentication

A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...

6.3CVSS0.00811EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/31 6:32 p.m.7 views

CVE-2025-12547 LogicalDOC Community Edition Admin Login login.jsp excessive authentication

A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely...

6.3CVSS6.5AI score0.00811EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
added 2025/10/31 8:07 a.m.11 views

Excessive CPU consumption in Reader.ReadResponse in net/textproto

...

5.3CVSS7AI score0.00518EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/31 12:30 a.m.12 views

EUVD-2025-37212

Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets that were too permissive. In particular, the nagios.service unit had executable permissions that were not required. Overly permissive permissions on service unit files can broaden local attack surface by...

5.1CVSS6.2AI score0.00332EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/29 11:16 p.m.4 views

AZL-98850 CVE-2025-61724 affecting package golang 1.27.1-1

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...

5.3CVSS0.00518EPSS
SaveExploits0References1
Rows per page
Query Builder