5401 matches found
SourceCodester Simple To-Do List System 代码注入漏洞
SourceCodester Simple To-Do List System is SourceCodester open source a simple to-do list system . A code injection vulnerability exists in SourceCodester Simple To-Do List System version 1.0, which originates from a cross-site scripting attack due to incorrect manipulation of the file...
CVE-2025-39699
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iovatophys The riscviommuptefetch function returns either NULL for unmapped/never-mapped iova, or a valid leaf pte pointer that requires no further validation. riscviommuiovatophys failed to...
CVE-2025-39699 iommu/riscv: prevent NULL deref in iova_to_phys
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iovatophys The riscviommuptefetch function returns either NULL for unmapped/never-mapped iova, or a valid leaf pte pointer that requires no further validation. riscviommuiovatophys failed to...
MAL-2025-43923 Malicious code in cypress-private-fetch-exosphere (npm)
The package cypress-private-fetch-exosphere was found to contain malicious code...
Malicious code in cypress-private-fetch-exosphere (npm)
The package cypress-private-fetch-exosphere was found to contain malicious code...
MAL-2025-44250 Malicious code in fetch-request-hyperion-kardashevscale (npm)
The package fetch-request-hyperion-kardashevscale was found to contain malicious code...
Malicious code in procyon-cz-conventional-changelog-lynx-fetch (npm)
The package procyon-cz-conventional-changelog-lynx-fetch was found to contain malicious code...
MAL-2025-45598 Malicious code in procyon-cz-conventional-changelog-lynx-fetch (npm)
The package procyon-cz-conventional-changelog-lynx-fetch was found to contain malicious code...
Sensitive Information Disclosure
@backstage/plugin-scaffolder-backend is vulnerable to Sensitive Information Disclosure. The vulnerability is due to duplicate logging of input values in the fetch:template action, which could expose sensitive data if $ secrets.x is used as an argument...
When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
...
net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
...
Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`
...
HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
...
Linux Distros Unpatched Vulnerability : CVE-2020-15168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the...
Malicious code in node-fetch-v3 (npm)
The package node-fetch-v3 was found to contain malicious code...
MAL-2025-42035 Malicious code in node-fetch-v3 (npm)
The package node-fetch-v3 was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2025-5064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2024-24750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling fetchurl and not consuming the incoming body or consuming it very...
GHSA-7CQ8-MJ8X-J263 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
Summary Using idlelib.autocomplete.AutoComplete.fetchcompletions, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...