EUVD-2025-53794

Malicious code in increasing-scarlet-lemming npm...

EUVD-2025-53797

Malicious code in increasing-indigo-frog npm...

EUVD-2025-53796

Malicious code in increasing-jade-wolverine npm...

EUVD-2025-53795

Malicious code in increasing-lime-trout npm...

EUVD-2025-53793

Malicious code in increasing-scarlet-orangutan npm...

EUVD-2025-53798

Malicious code in increasing-harlequin-chickadee npm...

AI Pulse: AI Bot Mitigation Is Increasing Everywhere

...

EUVD-2021-0382

Malware in sbrugna...

Pouring Acid Rain

Pouring Acid Rain By Trellix · April 30, 2024 This blog was written by Max Kersten In two recent major geopolitical conflicts, in Ukraine and in Israel, wipers - malware used to destroy access to files and commonly used to halt telecom operations - were used to destroy digital infrastructure. The...

@keystone-6/core's bundled cuid package known to be insecure

Summary The cuid package used by @keystone-6/ and upstream dependencies is deprecated and marked as insecure by the author. As reported by the author Cuid and other k-sortable and non-cryptographic ids Ulid, ObjectId, KSUID, all UUIDs are all insecure. Use @paralleldrive/cuid2 instead. What are...

Chinese Adult Site Leaking 14 Million User Details – and It’s Increasing!

By Waqas So far, the platform has leaked more than 14 million user accounts with more than 24 GB worth… This is a post from HackRead.com Read the original post: Chinese Adult Site Leaking 14 Million User Details - and Its Increasing!...

An owner can rug pull and or lock users' funds

Lines of code Vulnerability details Impact By implementing malicious versions of the interfaces required by the contracts used in the set functions, an owner can rug pull user positions. Even if the owner is benevolent the fact that there is a rug vector available may negatively impact the...

CVE-2021-32781

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response data. However when local response is generated due the intern...

CVE-2021-37656

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.RaggedTensorToSparse. The implementation has an incomplete validation of the splits values: it does not check...

Null pointer dereference

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.RaggedTensorToSparse. The implementation has an incomplete validation of the splits values: it does not check...

Smart Cars: Increasing Comfort — Reducing Security

By Uzair Amir Owners of advanced cars are always the target for cybercriminals... This is a post from HackRead.com Read the original post: Smart Cars: Increasing Comfort — Reducing Security...

Logic design flaw vulnerability at DBSHOP_0.9.3_Beta /module/Shopfront/src/Shopfront/Controller/HomemoneyController.php

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta /module/Shopfront/src/Shopfront/Controller/HomemoneyController.php at the logical design flaws vulnerabilities. The vulnerability is caused due to the fact that when withdrawing money, the system...

[SECURITY] Fedora 17 Update: bomber-4.10.5-1.fc17

Bomber is a single player arcade game. The player is invading various cities in a plane that is decreasing in height. The goal of the game is to destroy all the buildings and advance to the next level. Each level gets a harder by increasing the speed of the plane and the height of the buildings...

[SECURITY] Fedora 18 Update: bomber-4.10.4-1.fc18

Bomber is a single player arcade game. The player is invading various cities in a plane that is decreasing in height. The goal of the game is to destroy all the buildings and advance to the next level. Each level gets a harder by increasing the speed of the plane and the height of the buildings...

Fraudulent Apps and Fake AV Found on Google Play

Researchers from the security firm AegisLab discovered more than 15 fake antivirus and free SMS applications on Google’s recently rebranded content market place, Google Play. The applications are redirecting users to a third party site run by the app’s developer. AegisLab researchers could not sa...