EUVD-2007-3943

Malware in sbrugna...

EUVD-2006-4603

Malware in sbrugna...

EUVD-2024-35384

Malicious code in bioql PyPI...

EUVD-2021-6749

Malicious code in bioql PyPI...

EUVD-2024-35385

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bfa driver not setting the im pointer correctly resulting in a double release...

CVE-2025-20330 Cisco Unified Communications Manager IM and Presence Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...

Malicious code in @zalastax/nolb-_im- (npm)

The package @zalastax/nolb-im- was found to contain malicious code...

Malicious code in @zalastax/nolb-_im_ (npm)

The package @zalastax/nolb-im was found to contain malicious code...

MAL-2025-13695 Malicious code in @zalastax/nolb-react-im (npm)

The package @zalastax/nolb-react-im was found to contain malicious code...

MAL-2025-10119 Malicious code in @zalastax/nolb-_im- (npm)

The package @zalastax/nolb-im- was found to contain malicious code...

MAL-2025-9711 Malicious code in @youla-web/im (npm)

The package @youla-web/im was found to contain malicious code...

MAL-2025-10120 Malicious code in @zalastax/nolb-_im_ (npm)

The package @zalastax/nolb-im was found to contain malicious code...

PT-2025-35972

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a double-free vulnerability within the SCSI subsystem, specifically in the bfa driver. During initialization, if the bfad im probe function fails, the memory...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2020-36204

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur...

CVE-2019-9204

SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...

CVE-2019-9203

Authorization bypass in Nagios IM component of Nagios XI before 2.2.7 allows closing incidents in IM via the API...

CVE-2019-10787

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization...

CVE-2019-10788

im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function...