20 matches found
Malicious code in ded-aa-liza-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a328f8fbefe24a810c8fe1c0249029992137bec024cab060df03d88347b5185b On require of this package, index.js loads helpers.js which downloads a per-platform native executable linuxx64, linuxarm64, darwin, win32 from...
CVE-2026-2627
A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shared\ink\HID.dll of the component Backup/Restore. The manipulation results in link following. The attack needs to be approached locally. The...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990165 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fcexchabtsresp fcexchreleaseep will decrease the ep's referenc...
CVE-2025-37144: Improper Limitation of a Pathname to a Restricted Directory
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...
CVE-2025-37145: Improper Limitation of a Pathname to a Restricted Directory
Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...
EUVD-2013-6718
Malware in sbrugna...
CVE-2024-28876
Uncontrolled search path for some IntelR MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2024-7763 · Autodesk · Autodesk Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the atf asm interface.dll library, which can be exploited by a maliciously crafted MODEL file. This can lead to a crash or...
Yahoo User Interface library (YUI2) TreeView v2.8.2 - Multiple Reflected XSS Vulnerabilities
Exploit Title: Yahoo User Interface library YUI2 TreeView v2.8.2 - Multiple Reflected Cross Site Scripting XSS Exploit Author: Rian Saaty Vendor Homepage: https://yui.github.io/yui2/ Software Link: https://yui.github.io/yui2/ Version: 2.8.2 Tested on: MacOS, WindowsOS, LinuxOS CVE : CVE-2022-4819...
CVE-2022-38827
TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...
HPE Apollo 70 安全漏洞
The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A local buffer overflow vulnerability exists in the libifc.so webifcsetadconfig function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...
USN-4534-1 libdbi-perl vulnerability
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information...
USN-2898-1: GTK+ vulnerability
It was discovered that GTK+ incorrectly handled certain large images. A remote attacker could use this issue to cause GTK+ applications to crash, resulting in a denial of service, or possibly execute arbitrary code...
Cross site scripting
Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6916
CVE-2013-6916 covers multiple XSS vulnerabilities in Cybozu Garoon’s Yahoo! UI Library prior to 3.7.2, exploitable when using IE9/10 or Chrome. Attackers could inject arbitrary script/HTML via unspecified vectors in the web application. Connected sources (JVN entries) confirm Cybozu Garoon 3.7.2-...
CVE-2013-6916
Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6916: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Onpub web content management Multiple Vulnerabilty
Exploit for php platform in category web applications ================================================== Onpub web content management Multiple Vulnerabilty ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...
