MAL-2025-41779 Malicious code in this-is-vvvv (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2020-28037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isbloginstalled in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attack...

Linux Distros Unpatched Vulnerability : CVE-2020-28039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - isprotectedmeta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the SelectListByPage function in the file DictDataDao.go when processing the orderByColumn or isAsc arguments. An attacker can execute arbitrary SQL commands by supplying crafted input to these parameters. Remediation...

ROS-20250818-03

Vulnerability of phpseclib cryptographic protocol library is related to incorrect processing of RSA PKCS1 signature verification. of RSA PKCS1 signatures. Exploitation of the vulnerability could allow an attacker acting remotely, to compromise the target system. A vulnerability in the phpseclib...

Malicious code in is-mlcs (npm)

The package is-mlcs was found to contain malicious code...

Malicious code in is-jailbreak (npm)

The package is-jailbreak was found to contain malicious code...

Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)

The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...

Malicious code in impinj-is-tool (npm)

The package impinj-is-tool was found to contain malicious code...

MAL-2025-15161 Malicious code in availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps (npm)

The package availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps was found to contain malicious code...

Malicious code in @zalastax/nolb-react-is (npm)

The package @zalastax/nolb-react-is was found to contain malicious code...

MAL-2025-23081 Malicious code in impinj-is-tool (npm)

The package impinj-is-tool was found to contain malicious code...

MAL-2025-23395 Malicious code in is-mlcs (npm)

The package is-mlcs was found to contain malicious code...

MAL-2025-23394 Malicious code in is-jailbreak (npm)

The package is-jailbreak was found to contain malicious code...

MAL-2025-18700 Malicious code in down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn (npm)

The package down-lo-ad-now-zip-mp3-68330-there-it-is-ctlad-hdnfhn was found to contain malicious code...

What Does Palantir Actually Do?

Palantir is often called a data broker, a data miner, or a giant database of personal information. In reality, it’s none of these—but even former employees struggle to explain it...

Linux Distros Unpatched Vulnerability : CVE-2022-50126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: fix assertion 'jh-bfrozendata == NULL' failure when journal aborted Following process will fail assertion 'jh-bfrozendata == NULL' in...

Linux Distros Unpatched Vulnerability : CVE-2022-49738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on iextraisize in isalive syzbot found a f2fs bug: BUG: KASAN: slab-out- of-bounds in datablkaddr fs/f2fs/f2fs.h:2891 inline BUG:...

Linux Distros Unpatched Vulnerability : CVE-2022-49005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field i...

The vulnerability of the default_version_is_new() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the defaultversionisnew function in Netgear’s JWNR2000v2 router software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrit...