38144 matches found
USN-7835-6: Linux kernel (AWS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
CVE-2025-41106
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'firstname' in '/clients/savecontact/'...
CVE-2025-41104
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'customfield1' in '/estimaterequests/saveestimaterequest'...
CVE-2025-41103
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'...
CVE-2025-5718
The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP...
EUVD-2025-115360
Malicious code in child-process-framework-metalsmith-celeste npm...
Malicious code in protractor-regulus-xo-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0ecd50ac91c36ba79eb6075ee122df6de1bf11f6408f38cf8f4a85d017fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122024
Malicious code in server-framework-andromeda-aurora npm...
EUVD-2025-113010
Malicious code in grus-remark-transport-framework npm...
EUVD-2025-111662
Malicious code in lint-staged-delphinus-typeorm-framework npm...
EUVD-2025-124170
Malicious code in oberon-passport-toml-framework npm...
EUVD-2025-124757
Malicious code in mongoose-nextjs-tailwindcss-xml npm...
Malicious code in sass-loader-jovian-axios-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122585
Malicious code in rest-adonis-framework-ganymede npm...
EUVD-2025-113914
Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin npm...
EUVD-2025-124662
Malicious code in mysql-nodejs-callisto-framework npm...
EUVD-2025-121915
Malicious code in slidev-nestjs-jekyll-framework npm...
EUVD-2025-120576
Malicious code in webdriver-mocha-leda-vortex-zenobia npm...
Malicious code in javascript-scorpius-global-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c603b76a38d618d9f50be6f6317eb946aa55b04eefa49bfe10b3e03fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...