5076 matches found
GHSA-XCH9-H8QW-85C7
creationtimestamp| type| source ---|---|--- 2025-10-02 12:35:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304596433685168...
GHSA-7232-97C6-J525
creationtimestamp| type| source ---|---|--- 2025-10-02 12:35:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304596433685168...
GHSA-W2HG-2V4P-VMH6
creationtimestamp| type| source ---|---|--- 2025-10-02 12:32:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304586574138947...
Malicious code in react-content-parser (npm)
The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...
GHSA-7229-Q9PV-J6P4
creationtimestamp| type| source ---|---|--- 2025-09-28 09:16:19+00:00| published-proof-of-concept| https://t.me/cKure/15460 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2267 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2267 2026-07-11 11:00:04+00:00|...
Malicious code in postman-json (npm)
The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...
GHSA-954C-JJX6-CXV7
creationtimestamp| type| source ---|---|--- 2025-09-25 01:51:39+00:00| seen| https://gist.github.com/JordoTaylor/386435f386c4c6cdbd5eaa512832d448...
GHSA-6PX8-22W5-W334
creationtimestamp| type| source ---|---|--- 2025-09-23 02:51:25+00:00| seen| https://gist.github.com/konard/308afa54a32c9f1918f70f1cb1bdd50b 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen|...
Dotnetnuke < 10.1.0 Stored Cross-Site Scripting (XSS) in Prompt module (GHSA-2qxc-mf4x-wr29)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.1.0. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Malicious code in eslint-config-detector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-223M-4RFP-646H vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-765J-9R45-W2Q2 vulnerabilities
Vulnerabilities for packages: superset...
GHSA-4PFG-2MW5-F8JX
creationtimestamp| type| source ---|---|--- 2025-09-19 16:33:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115231924186868805...
GHSA-P6JQ-8VC4-79F6
creationtimestamp| type| source ---|---|--- 2025-09-18 13:03:44+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lz4fxtll3w2m...
SQLite 3.49.1 < 3.50.3 Integer Overflow (GHSA-v2c8-vqqp-hv3g)
The version of SQLite installed on the remote host is prior to 3.50.3. It is, therefore, affected by a integer overflow vulnerability as referenced in GHSA-v2c8-vqqp-hv3g advisory. - An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array...
Malicious code in @pumpfun-sdk/metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @teselagen/sequence-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-FMQ3-6XHC-R845
creationtimestamp| type| source ---|---|--- 2025-09-15 16:42:13+00:00| seen| Telegram/3aHb6OLUeEF2TdGlZJYIzMZ8kqB1Yy8KWUYwOy2Wh1-oSw...
Erlang/OTP (Erlang OTP) TLS Occasional Improper ROOT Certificate Validation Vulnerability (GHSA-3rgm-p3c6-g54m) - Linux
Erlang/OTP Erlang OTP is prone to a TLS occasional improper ROOT certificate validation vulnerability in the ssl component. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...