CVE-2025-55086

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read...

CVE-2025-55086

CVE-2025-55086 affects NetXDuo (Eclipse Foundation ThreadX) prior to v6.4.4. The DHCPV6 client contains an unchecked index when extracting the server DUID from the server reply, enabling a crafted network packet to cause an out-of-memory read. Multiple sources (NVD, Red Hat, OSV, CNNVD, CIRCL) co...

CVE-2025-55086

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read...

EUVD-2025-35051

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

MAL-2025-191666 Malicious code in yelp-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdea5ca17bb09234a292159e525a2a38ac3fd43760c6f2184aa27f563f320075 During import, the package attempts to exfiltrate potentially sensitive data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

E-commerce 安全漏洞

E-commerce is a dynamic e-commerce website by the individual developer Bhabishya Ghimire. A security vulnerability exists in E-commerce version 1.0, which stems from the /index parameter not clearing the input to be reflected directly back to the HTML response, which could lead to a cross-site...

CVE-2025-55086: Improper Validation of Specified Index, Position, or Offset in Input

In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read...

PT-2025-42766

Name of the Vulnerable Software and Affected Versions Bhabishya-123 E-commerce version 1.0 Description A Cross-Site Scripting XSS issue exists in the software, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML,...

CVE-2025-61456

A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce v1.0 within the index.php endpoint. The root cause is the failure to sanitize the URL path parameter before reflecting it into the HTML response, specifically via the /index parameter. Attackers can inject JavaScript pa...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

JLSEC-2025-109 FFmpeg through 4.3 has a heap-based buffer overflow in `avio_get_str` in `libavformat/aviobuf.c`...

FFmpeg through 4.3 has a heap-based buffer overflow in aviogetstr in libavformat/aviobuf.c because dnnbackendnative.c calls ffdnnloadmodelnative and a certain index check is omitted...

Malicious code in huzzleuo130 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 85df7f2dfe2955a251c0e1858049dab9b978d9812a067235cb04c6ffb25131fc Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191634 Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191655 Malicious code in rando0192490 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d5805a2205690aef1009d3bec77df6c20de9d16fc8744b8e44f279bcc2ddab8 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

Malicious code in humunculous59101 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a91be6e2afb95f2eeaf8f48eb0bf62bf737ba21ae56aee91c4c75c27a5ba21b Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...