2039 matches found
CVE-2025-55753
An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: fro...
CVE-2025-65951 Inside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage
Inside Track / Entropy Derby is a research-grade horse-racing betting engine. Prior to commit 2d38d2f, the VDF-based timelock encryption system fails to enforce sequential delay against the betting operator. Bettors pre-compute the entire Wesolowski VDF and include vdfOutputHex in their encrypted...
Inside Track 加密问题漏洞
Inside Track is a horse racing betting engine by the individual developer Lumina Mescuwa. Inside Track suffers from an encryption issue vulnerability that stems from the VDF encryption system not enforcing a sequential delay, which could lead to immediate decryption...
MAL-2025-191010 Malicious code in set-nested-prop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...
WordPress plugin Email Subscribers & Newsletters 访问控制错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An Access Control Erro...
CVE-2025-63747
CVE-2025-63747 affects QaTraq 6.9.2. The issue arises from default-enabled administrative credentials, allowing immediate login through the web app login page and granting administrative access if reachable. The vulnerability is present in the default configuration, so an attacker who can access ...
CVE-2025-64707 Frappe LMS revoking access did not show immediate effect as roles were cached
Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, when admins revoked a role from the user, the effect was not immediate because of caching. The issue has been fixed in version 2.41.0 by ensuring the cache is...
EUVD-2025-98072
Malicious code in immediatecrayfishz3n npm...
Malicious code in immediate_halibut_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af368b493186e1b0e8552d18ea4c339461cc202ed1524aabfb9678cfbc43b478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-104594
Malicious code in immediatehalibutz3n npm...
EUVD-2025-79064
Malicious code in immediatecardinalz3n npm...
Malicious code in immediate_coral_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d25d2985e61dde9abc2f6f6c6f0c1c6b2443451bec17d568b8a93668c275e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63623
Malicious code in immediatecaribouz3n npm...
EUVD-2025-63624
Malicious code in immediateantlionz3n npm...
EUVD-2025-63621
Malicious code in immediatelampreyz3n npm...
MAL-2025-94931 Malicious code in immediate_caribou_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37686f13db21370e16eb4c50ca0e786c8187e1b0670c0092cce37dc51e6f22ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53861
Malicious code in immediate-olive-anglerfish npm...
EUVD-2025-53862
Malicious code in immediate-cyan-flamingo npm...