50486 matches found
EUVD-2025-93624
Malicious code in zaki-mieayam69-breki npm...
EUVD-2025-93461
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
CVE-2025-60726
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2025-62205 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-60726
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2025-12942
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
CVE-2025-12942 Improper input validation in NETGEAR R6260 and R6850
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
CVE-2025-12942 Improper input validation in NETGEAR R6260 and R6850
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
CVE-2025-13027 Memory safety bugs fixed in Firefox 145 and Thunderbird 145
Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145...
CVE-2025-13027
Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 145 and Thunderbird 145...
CVE-2025-13024
CVE-2025-13024 is caused by a JIT miscompilation in the JavaScript Engine: JIT component. It affects Mozilla Firefox and Mozilla Thunderbird prior to version 145. The reported impact is arbitrary code execution via the JIT issue, with memory-related concerns noted in related advisories. Remediati...
MAL-2025-116097 Malicious code in nurul-lupis56-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fc1c5e424c3edcfb6c57cf2fd14b4a8b5d72897b4cb8dc7fd73090cc3ea504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-116304 Malicious code in open_alpaca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092370c455169a99a6e0ae8133a420d900b719e73ecc540a2d15695dd4fac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-112961 Malicious code in candra-gembus30-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4030faa1a60dd73d91bf873b1dc87290ed5cb4843ca3f27d5a0747393eafe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
microcode_ctl: From CVEorg collector
New Spectre-v2 attack classes have been discovered within CPU architectures that enable self-training exploitation of speculative execution within the same privilege domain. These novel techniques bypass existing hardware and software mitigations, including IBPB, eIBRS, and BHINO, by leveraging...
EUVD-2025-74582
Malicious code in helplessmoleaquamarine-54 npm...
MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in diverse_fowl_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3871b38954cd6cf47cd44f222e158b0550a835d674d852580c46be5f64a27104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in andi-sambalado29-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b57eb59197665d52d6fb0dfa9516cca2e70ac70863afc49320dc13b1c4bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...