Lucene search
+L

1886 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/19 5:57 a.m.6 views

Malicious code in babel-loader-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1700e85206eea0c06ca2bedd5155e402644feb176d29155bb5194ebaa3096336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/05/19 5:57 a.m.6 views

MAL-2025-3985 Malicious code in babel-loader-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1700e85206eea0c06ca2bedd5155e402644feb176d29155bb5194ebaa3096336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/05/16 1:24 p.m.5 views

OESA-2025-1520 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js...

3.3CVSS7AI score0.00395EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/16 1:24 p.m.9 views

OESA-2025-1519 nodejs security update

Node.js is an open-source, cross-platform, JavaScript runtime environment, it executes JavaScript code outside of a browser. Security Fixes: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js...

3.3CVSS7AI score0.00395EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.14 views

kernel: net/mlx5: fs, lock FTE when checking if active

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

5.5CVSS6.8AI score0.00198EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/05/09 6:45 a.m.9 views

CVE-2025-37876

In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIGPROCFS When testing a special config: CONFIGNETFSSUPPORTS=y CONFIGPROCFS=n The system crashes with something like: 3.766197 ------------ cut here ------------ 3.766484 kernel BUG at...

5.5CVSS5.6AI score0.00226EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/04/25 6:29 p.m.11 views

CVE-2025-30960

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

8.3CVSS7.2AI score0.003EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2025/04/22 12:0 a.m.265 views

📄 tar-fs 3.0.0 Arbitrary File Write

tar-fs version 3.0.0 suffers from an arbitrary file write vulnerability. Exploit Title: tar-fs 3.0.0 - Arbitrary File Write/Overwrite Date: 17th April, 2024 Exploit Author: Ardayfio Samuel Nii Aryee Software link: https://github.com/mafintosh/tar-fs Version: tar-fs 3.0.0 Tested on: Ubuntu CVE:...

7.5CVSS7.8AI score0.02186EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2025/04/22 12:0 a.m.251 views

tar-fs 3.0.0 - Arbitrary File Write/Overwrite

Exploit Title: tar-fs 3.0.0 - Arbitrary File Write/Overwrite Date: 17th April, 2024 Exploit Author: Ardayfio Samuel Nii Aryee Software link: https://github.com/mafintosh/tar-fs Version: tar-fs 3.0.0 Tested on: Ubuntu CVE: CVE-2024-12905 Run the command: Example: python3 exploit.py authorizedkeys...

7.5CVSS6.3AI score0.02186EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/04/17 1:33 p.m.15 views

CVE-2025-30962

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fs-code FS Poster fs-poster allows Reflected XSS.This issue affects FS Poster: from n/a through = 6.5.8...

7.1CVSS7.2AI score0.00226EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/16 11:15 a.m.4 views

CVE-2025-30960

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

8.3CVSS7.2AI score0.003EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/16 11:15 a.m.24 views

CVE-2025-30960

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

8.3CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/16 10:23 a.m.36 views

CVE-2025-30960 WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

8.3CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 10:23 a.m.6 views

CVE-2025-30960 WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through = 6.5.8...

8.3CVSS7.3AI score0.003EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 10:23 a.m.65 views

CVE-2025-30960

CVE-2025-30960 is a Missing Authorization vulnerability in the FS Poster WordPress plugin (NotFound FS Poster), affecting versions n/a through 6.5.8. Connected sources (Patchstack/Red Hat/NVD) describe a Subscriber+ site-wide broken access control; no exploitation status is provided. Remediation:...

8.3CVSS7.2AI score0.003EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.17 views

WordPress plugin FS Poster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.3CVSS8.4AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/16 12:0 a.m.8 views

PT-2025-16583 · Fs Poster · Fs Poster

Name of the Vulnerable Software and Affected Versions: FS Poster versions n/a through 6.5.8 Description: The issue is related to a Missing Authorization vulnerability in NotFound FS Poster. This problem affects FS Poster, indicating a lack of proper authorization checks. Recommendations: For...

8.3CVSS8.6AI score0.003EPSS
SaveExploits0References7
Amazon
Amazon
added 2025/04/16 12:0 a.m.4 views

Low: nvidia-fs

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...

3.3CVSS6.5AI score0.00254EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2025/04/15 12:15 p.m.3 views

CVE-2025-30962

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fs-code FS Poster fs-poster allows Reflected XSS.This issue affects FS Poster: from n/a through = 6.5.8...

7.2AI score0.00226EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/15 12:15 p.m.12 views

CVE-2025-30962

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fs-code FS Poster fs-poster allows Reflected XSS.This issue affects FS Poster: from n/a through = 6.5.8...

7.1CVSS0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder