1653 matches found
CVE-2025-53832
creationtimestamp| type| source ---|---|--- 2025-07-20 23:48:39+00:00| published-proof-of-concept| https://github.com/translated/lara-mcp/security/advisories/GHSA-xj5p-8h7g-76m7...
CVE-2025-53818
creationtimestamp| type| source ---|---|--- 2025-07-12 10:41:59+00:00| published-proof-of-concept| https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf...
@bachha2906/better-auth (>=1.0.24 <=1.0.26), @bachha2906/better-auth-expo (=1.0.26) +27 more potentially affected by unknown CVE via better-call (>=0.1.38 <=1.0.11)
better-call NPM version =0.1.38, =1.0.24, =0.0.1, =0.8.2, =1.1.10-fork.1, =1.0.20, =1.1.22, =1.1.22, =0.0.1, =1.1.19-fork.2, =1.0.23, =1.0.23, =0.0.5, =1.2.14, =1.2.15 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HQ75-XG7R-RX6C...
CVE-2025-53372
creationtimestamp| type| source ---|---|--- 2025-07-08 06:35:04+00:00| published-proof-of-concept| https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95...
GitHub Advisory Database by the numbers: Known security vulnerabilities and what you can do about them
The GitHub Advisory Database Advisory DB is a vital resource for developers, providing a comprehensive list of known security vulnerabilities and malware affecting open source packages. This post analyzes trends in the Advisory DB, highlighting the growth in reviewed advisories, ecosystem coverag...
GHSA-63XR-98VC-WHX5
creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19468...
GHSA-9VJ4-RV7Q-36QJ
creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19301...
GHSA-R976-RFRV-Q24M
creationtimestamp| type| source ---|---|--- 2025-06-21 03:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19098...
GHSA-QR9F-MPGF-WP25
creationtimestamp| type| source ---|---|--- 2025-06-19 14:40:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18863...
GHSA-JP4X-W9CJ-97Q7
creationtimestamp| type| source ---|---|--- 2025-06-13 19:03:31+00:00| seen| Telegram/4Ga2KnPxVC8teo9C6hWW8v7cz1iZaC5NGvXAx1RBKflQoQ...
CVE-2024-38524
creationtimestamp| type| source ---|---|--- 2025-06-10 14:14:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jm79-7xhw-6f6f...
CVE-2025-49007
Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...
GHSA-6C48-67XX-VQGC
creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...
CVE-2021-37700
@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...
CVE-2021-21399
Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...
GHSA-RVHC-RCH9-J943
creationtimestamp| type| source ---|---|--- 2025-05-21 14:43:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17120...
CVE-2025-47775
creationtimestamp| type| source ---|---|--- 2025-05-14 15:08:16+00:00| published-proof-of-concept| https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3...
CVE-2025-47280
Umbrao Forms HTML injection : The Send email workflow in Umbraco Forms (versions 7.x through just before 13.4.2 and 15.1.2) does not HTML-encode user-provided field values, allowing potential email spoofing or bypass of security checks. Affected forms can patch by updating to 13.4.2 or 15.1.2, or...
Malicious code in ascpc-npm-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...