EUVD-2015-9382

Malware in sbrugna...

CVE-2025-9239

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils of the file eladmin-common/src/main/java/me/zhengjie/utils/EncryptUtils.java of the component DES Key Handler. The manipulation of the argument STRPARAM with the input Passw0rd...

Malicious code in @tinkoff-react-bui/input-password (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32c841225c2d1d24bb429b7cc5315b5420fd5ab2debcb91136b4bfe052eac06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

Z-BlogPHP security vulnerabilities

Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. A security vulnerability exists in Z-BlogPHP version 1.6.0, which stems from the passwordvisitinputpassword function in zbuser/plugin/passwordvisit/include.php that uses loose comparisons for authentication, which...

PT-2021-10884

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.6.0 Valyria Description The issue is related to incorrect access control in Z-BlogPHP. It is possible to bypass authentication using PHP loose comparison and a magic hash. The passwordvisit input password function in zb...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: GHSA-RRJ3-QMH8-72PF...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: MEND:CVE-2016-10526...