321 matches found
MAL-2025-33956 Malicious code in static-jmodule (npm)
The package static-jmodule was found to contain malicious code...
MAL-2025-29760 Malicious code in project-1qbjl-delta (npm)
The package project-1qbjl-delta was found to contain malicious code...
MAL-2025-32955 Malicious code in seonatmunsetmaouseomauntsmeoatnumeontkmnteumntemoiaoisntmoeunitmoeantum (npm)
The package seonatmunsetmaouseomauntsmeoatnumeontkmnteumntemoiaoisntmoeunitmoeantum was found to contain malicious code...
MAL-2025-18719 Malicious code in down-tanker (npm)
The package down-tanker was found to contain malicious code...
MAL-2025-14943 Malicious code in asset_cloud (npm)
The package assetcloud was found to contain malicious code...
MAL-2025-13864 Malicious code in @zittertea/ducimus-exercitationem-autem (npm)
The package @zittertea/ducimus-exercitationem-autem was found to contain malicious code...
MAL-2025-22097 Malicious code in hacklocal (npm)
The package hacklocal was found to contain malicious code...
MAL-2025-35398 Malicious code in test-mlw2-gazon-notal (npm)
The package test-mlw2-gazon-notal was found to contain malicious code...
MAL-2025-33156 Malicious code in shopriver (npm)
The package shopriver was found to contain malicious code...
MAL-2025-20924 Malicious code in fqujyedpnshirvlk (npm)
The package fqujyedpnshirvlk was found to contain malicious code...
MAL-2025-38322 Malicious code in victor-nnt-project (npm)
The package victor-nnt-project was found to contain malicious code...
MAL-2025-23745 Malicious code in jest-sync-json-reporter (npm)
The package jest-sync-json-reporter was found to contain malicious code...
PT-2025-31848 · Anthropic · Filesystem Mcp Server +1
Name of the Vulnerable Software and Affected Versions: Claude affected versions not specified Description: The Claude code exhibits vulnerabilities related to path validation. The system is generally scoped to a current working directory and requests user consent when accessing unfamiliar files o...
CVE-2024-0261
A vulnerability has been found in Sentex FTPDMIN 0.96 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component RNFR Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed t...
LLMs Unlock New Paths to Monetizing Exploits
We argue that Large language models LLMs will soon alter the economics of cyberattacks. Instead of attacking the most commonly used software and monetizing exploits by targeting the lowest common denominator among victims, LLMs enable adversaries to launch tailored attacks on a user-by-user basis...
UBUNTU-CVE-2024-47738
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 "wifi: mac80211: don't use rate mask for scanning", ignore incorrect settings to avoid no supported rate warning reported by syzbot. The...
Exploit for Path Traversal in Jenkins
Jenkins File Read Vulnerability - CVE-2024-23897 !My Shop...
CVE-2024-21685
This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosur...
CVE-2024-21685
CVE-2024-21685 affects Atlassian Jira Core Data Center. Introduced in versions 9.4.0, 9.12.0, and 9.15.0, it is a high-severity information disclosure (CVSS v3.1 base 6.5/7.4 depending on vector). An unauthenticated attacker can view sensitive data with user interaction required. Remediation from...
CVE-2024-34130 Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user...