25898 matches found
MAL-2025-22056 Malicious code in gulp-nts-uit-index-helper (npm)
The package gulp-nts-uit-index-helper was found to contain malicious code...
MAL-2025-25522 Malicious code in log-zeta-resolve-index-module (npm)
The package log-zeta-resolve-index-module was found to contain malicious code...
MAL-2025-28203 Malicious code in old-secure-table-await-index (npm)
The package old-secure-table-await-index was found to contain malicious code...
MAL-2025-20237 Malicious code in fast-enum-compress-index-minify (npm)
The package fast-enum-compress-index-minify was found to contain malicious code...
Malicious code in void-omicron-nu-index-await (npm)
The package void-omicron-nu-index-await was found to contain malicious code...
MAL-2025-23114 Malicious code in index-gamma-await-sanitize-private (npm)
The package index-gamma-await-sanitize-private was found to contain malicious code...
MAL-2025-38552 Malicious code in void-omicron-nu-index-await (npm)
The package void-omicron-nu-index-await was found to contain malicious code...
MAL-2025-28218 Malicious code in omicron-deploy-index-bad-sun (npm)
The package omicron-deploy-index-bad-sun was found to contain malicious code...
Malicious code in notify-index-secure-process-cron (npm)
The package notify-index-secure-process-cron was found to contain malicious code...
Malicious code in gulp-nts-uit-index-helper (npm)
The package gulp-nts-uit-index-helper was found to contain malicious code...
MAL-2025-11971 Malicious code in @zalastax/nolb-idx (npm)
The package @zalastax/nolb-idx was found to contain malicious code...
CVE-2025-52335
EyouCMS 1.7.3 is vulnerale to Cross Site Scripting XSS in index.php, which can be exploited to obtain sensitive information...
MAL-2025-47804 Malicious code in titifel-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 246211906386c6795c3728d15bf42f5b9083257d1964d8dc21bcda833dd6363c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
ArrayQueue::push_front is not panic-safe
The safe API arrayqueue::ArrayQueue::pushfront can lead to deallocating uninitialized memory if a panic occurs while invoking the clone method on the passed argument. Specifically, pushfront receives an argument that is intended to be cloned and pushed, whose type implements the Clone trait...
RUSTSEC-2025-0054 ArrayQueue::push_front is not panic-safe
The safe API arrayqueue::ArrayQueue::pushfront can lead to deallocating uninitialized memory if a panic occurs while invoking the clone method on the passed argument. Specifically, pushfront receives an argument that is intended to be cloned and pushed, whose type implements the Clone trait...
CVE-2025-55198
A flaw was found in helm.sh/helm/v3. Improper validation of type errors during parsing of Chart.yaml and index.yaml files can trigger a panic. A remote attacker, requiring user interaction, can trigger this panic via a malformed chart file. This can lead to an application level denial of service...
CVE-2025-7761
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
CVE-2025-7761 Reflected XSS in Lepszy BIP
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
CVE-2025-7761
CVE-2025-7761 – Reflected XSS in Lepszy BIP : The vulnerability arises from improper input validation in the index.php form parameter, allowing arbitrary JavaScript to execute in a victim’s browser when a specially crafted URL is opened. Affected: Lepszy BIP (potentially all versions). Root cause...
CVE-2025-7761 Reflected XSS in Lepszy BIP
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...