Linux Distros Unpatched Vulnerability : CVE-2017-15266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTORwavextractmethod in wavextractor.c via a zero sample rate. CVE-2017-15266 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2019-15531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c. CVE-2019-15531 Note that...

Linux Distros Unpatched Vulnerability : CVE-2017-15267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flacmetadata in flacextractor.c. CVE-2017-15267 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2017-7994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference an...

Linux Distros Unpatched Vulnerability : CVE-2018-14347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c. CVE-2018-14347 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2017-15601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and...

Malicious code in api-extractor-lib5-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41364 Malicious code in api-extractor-lib5-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in package-extractor-test-03 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...

MAL-2025-41316 Malicious code in package-extractor-test-03 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...

Malicious code in package-extractor-test-02 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 697a859ea4113bd747e08d7e374aff232885ac108926a2f0b8be99612d3e67d0 The OpenSSF Package Analysis project identified...

MAL-2025-41315 Malicious code in package-extractor-test-02 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 697a859ea4113bd747e08d7e374aff232885ac108926a2f0b8be99612d3e67d0 The OpenSSF Package Analysis project identified...

MAL-2025-41280 Malicious code in api-extractor-lib4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 659516491da5eda94919af0b09a941720c55632d3a7c3ced84c056da49b4e504 The OpenSSF Package Analysis project identified 'api-extractor-lib4-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in api-extractor-lib4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 659516491da5eda94919af0b09a941720c55632d3a7c3ced84c056da49b4e504 The OpenSSF Package Analysis project identified 'api-extractor-lib4-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Linux Distros Unpatched Vulnerability : CVE-2022-24613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash...

Malicious code in k8s-image-extractor (npm)

The package k8s-image-extractor was found to contain malicious code...

Malicious code in string-template-extractor (npm)

The package string-template-extractor was found to contain malicious code...

MAL-2025-34097 Malicious code in string-template-extractor (npm)

The package string-template-extractor was found to contain malicious code...

MAL-2025-24148 Malicious code in k8s-image-extractor (npm)

The package k8s-image-extractor was found to contain malicious code...

curl: Account/Repository Takeover via Abandoned GitHub Username in curl's href_extractor.c

Summary: The hrefextractor.c example in the curl repository https://github.com/curl/curl/blob/master/docs/examples/hrefextractor.c references an external HTML parser library hosted at https://github.com/arjunc77/htmlstreamparser. The referenced GitHub username arjunc77 or repository...